last executing test programs: 2m3.475281767s ago: executing program 32 (id=91): syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3800046, &(0x7f0000000a40)={[], [{@obj_role={'obj_role', 0x3d, 'syzkaller\x00'}}, {@euid_eq}]}, 0x1, 0x553, &(0x7f0000001080)="$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") pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x4000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000700)={0x0}, &(0x7f0000000980)=0xc) syz_pidfd_open(r2, 0x0) r3 = memfd_create(&(0x7f0000000480)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x03\x00\x00\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xcaX\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\xb1\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedP\xff\xff\xff\xff\xff\xff\xff\xef)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xb4Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x9b-\xe3\xe6R\xa2T\x1e\n!\xad$\x93c\xd3\"\xd6\xa1\xd6\xfc\v\x81\x9e\xc1\xb3T\n\xd9\xff\x18 \xf8\xc4\xef\xd2\xb0\xf8\x80\xb8\x1e\xb7fo\x1c\a\xc9\x1a!D\xde\xc6\xf1\x13\xc2F\xc44A\x1d\xb7\xe6\xfbB\xee4\xa1\xdf+\xa5\xb1\xc2\xfb\xc0\t\x15\x7fA{\xe0\xc7\xe0\x96\xc9\xe6\x8fk\xe6\x87;\x03\xff\xb0\x10\x10\x1e\x14\x99\xc7\xd5)\x8d\xc7\xf0\xfd\xe9d\xc9\xce\x85\x88\x88\xcd\xf6\xb2\xbf\xf8E\xe4\xd8\xd0\xe00\xbd\xc2M\xe7\x1b\xac\xc0\v\xb0\xfc\"\x12\x8d\xa5\x96\x10\xf3\x82~2\xa3[\xa4w]\n\xb1+\xac\bR&B\xebW0\xe2\xffBO9y\x8e\xb6\x03\x99\r', 0x3) r4 = dup(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000600000008"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ioprio_get$uid(0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000009c0)={r0, r0, 0x4, 0x0, @void}, 0x10) write$binfmt_elf64(r4, &(0x7f0000000c00)=ANY=[@ANYBLOB="7f454c4606ff78a3050000000000000002003e00cd220000c9030000000000004000000000000000ea02000000000000020001000500380001000600b10600040300000081000000ff000000000000000900000000000000070000000000000009"], 0x178) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) close_range(r1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x14, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000340)='syzkaller\x00', 0x10001, 0x1000, &(0x7f0000001600)=""/4096, 0x41000, 0x8, '\x00', 0x0, @fallback=0x419c029437a48154, r0, 0x8, &(0x7f0000000440)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r4, 0x1, &(0x7f0000000680)=[r4, r4, r1], &(0x7f00000006c0)=[{0x3, 0x4, 0x3, 0x3}], 0x10, 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r6, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380), 0x0, 0xc9, &(0x7f00000003c0), 0x0, 0x10, &(0x7f0000000300), &(0x7f0000000480), 0x8, 0xe9, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') unlinkat(r8, &(0x7f0000000280)='./file0\x00', 0x200) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xa, 0xa, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x1, 0xb, 0x6, 0x1, 0x0, 0xfffffffffffffffc}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0x11}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x1}, @alu={0x7, 0x1, 0x8, 0x8, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffc}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0xf1, &(0x7f00000001c0)=""/241, 0x41100, 0x40, '\x00', 0x0, @fallback=0x10, r1, 0x8, &(0x7f00000002c0)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x1, &(0x7f0000000740)=[r9, 0xffffffffffffffff], &(0x7f0000000780)=[{0x1, 0x1, 0x10, 0x3}], 0x10, 0x1}, 0x94) r10 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r10, &(0x7f0000000880)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x6, 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x441, 0x108) fallocate(r11, 0x20, 0x0, 0x8000) 47.526899925s ago: executing program 5 (id=1333): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$kcm(0x23, 0x2, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000001707001e95000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x28, &(0x7f00000000c0)=""/40, 0x40f00, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x1, 0x7, 0x6}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000180)=[0x1], &(0x7f00000001c0)=[{0x4, 0x5, 0x2, 0x8}, {0x1, 0x2, 0xd, 0x2}, {0x3, 0x3, 0x2}, {0x3, 0x2, 0x3, 0xb}, {0x2, 0x3, 0x6, 0x8}, {0x3, 0x2, 0x8, 0x6}, {0x0, 0x2, 0xa, 0x6}], 0x10, 0x5}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x8927, &(0x7f0000000000)={0xffffffffffffffff, r2}) r3 = socket$kcm(0xa, 0x2, 0x73) recvmsg(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x2064) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0x2, 0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = msgget$private(0x0, 0x0) msgsnd(r5, 0x0, 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r7}, 0x10) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r9 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) fcntl$setlease(r9, 0x400, 0x1) close(r9) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x18, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000001000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES64, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='xs_stream_read_request\x00', r10, 0x0, 0x4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000580)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="67fa07357a7d"}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stack\x00') socket$inet_sctp(0x2, 0x5, 0x84) 47.41284983s ago: executing program 3 (id=1336): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00'}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0x1, 0x804, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00'}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee00}}, './file0\x00'}) lsetxattr$security_capability(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000500), &(0x7f0000000680)=@v3={0x3000000, [{0x7fffffff, 0x5}, {0x5, 0xb9d1}], r4}, 0x18, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000010) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x40081}, 0x0) r6 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x3c7}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r8, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={0x0}}, 0x8000) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a32000000005f6663a2e564a6626bdc55d7a5445a5456e0c1e070bf44bf388a00"/133], 0x54}}, 0x0) 47.355821392s ago: executing program 5 (id=1338): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r2, r2, 0x2f, 0x0, @void}, 0x10) 47.325328004s ago: executing program 5 (id=1339): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xffffdffb, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r2, 0x0, 0x4}, 0x18) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x8f0, &(0x7f0000002400)) (fail_nth: 4) 47.257552146s ago: executing program 3 (id=1342): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000022007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000140)=@md0, 0x0, &(0x7f0000000200)='./file0\x00') socket(0x40000000015, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x6}, 0x18) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f00000027c0)=ANY=[@ANYBLOB="4c000000000801040000000000000000000000070900010073797a3100000000050003002f0000000600024086dd00001c0004"], 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) 47.052775995s ago: executing program 3 (id=1343): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d00)={{r4}, 0x0, &(0x7f0000001cc0)=r0}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000130000/0xc00000)=nil, 0xc00000, 0x4) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0xd) fcntl$setlease(r7, 0x400, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r9}, 0x10) getrlimit(0x5, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) 46.983236208s ago: executing program 5 (id=1346): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x10000, 0x3fc, 0x2}, 0x0, 0x7, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x2, &(0x7f0000000480)=ANY=[], 0x0, 0x40000003, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000000)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) 46.908065631s ago: executing program 5 (id=1350): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c03400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@noload}]}, 0xea, 0x472, &(0x7f0000000f40)="$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") mount_setattr(0xffffffffffffffff, 0x0, 0x9800, 0x0, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000150000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x28000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xb4, 0x30, 0xffff, 0x70bd25, 0x0, {}, [{0xa0, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x7, 0x2, 0x9, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) 46.501766359s ago: executing program 3 (id=1354): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000022007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000140)=@md0, 0x0, &(0x7f0000000200)='./file0\x00') socket(0x40000000015, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x6}, 0x18) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f00000027c0)=ANY=[@ANYBLOB="4c000000000801040000000000000000000000070900010073797a3100000000050003002f0000000600024086dd00001c0004"], 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) 46.445419181s ago: executing program 3 (id=1356): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="090000000400000008000000"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x14, 0x3a, 0x229, 0x0, 0x25dfdbfc, {0xa}}, 0x14}}, 0x8000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x141a42, 0x1c2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x1701) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x44, &(0x7f0000000080)={0x2, 0x3, 0x17, 0x1}, 0x8, 0x20, 0x3, 0x0, 0x8, 0x404, 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x74}}, 0x0) write$binfmt_script(r8, &(0x7f0000000200), 0xfea7) copy_file_range(r7, 0x0, r5, 0x0, 0xffffffffa003e45c, 0x700000000000000) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r9, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f283e6d60200000000000000000000000100", [0x208, 0x2]}) r10 = open(&(0x7f0000000180)='./file1\x00', 0xe0142, 0x102) pwritev2(r10, &(0x7f0000001100)=[{&(0x7f0000001080)='\b', 0x1}], 0x1, 0x7000, 0x0, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10008000}, 0x8004) 46.118395215s ago: executing program 4 (id=1362): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00'}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TCFLSH(r1, 0x8925, 0x200000000000004) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b7040000010000008500000078000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r3 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e1d, 0x101, @empty}, {0xa, 0x4e22, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x899, 0x1]}}, 0x5c) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1d, 0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$RTC_WKALM_RD(r5, 0x80287010, &(0x7f0000000180)) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010329bd7000fcdbdf252400000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6064e22000300000001250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000001cc0)=ANY=[], 0x1, 0x264, &(0x7f0000003080)="$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") rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)='.\x02\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x18) kcmp(0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 45.885992395s ago: executing program 3 (id=1366): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x7}, 0x20) 45.820433538s ago: executing program 4 (id=1367): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000600)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@mb_optimize_scan}, {@bsdgroups}, {@usrjquota, 0x22}, {@nojournal_checksum}, {@errors_remount}], [], 0x2c}, 0x84, 0x4cc, &(0x7f0000001340)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@grpjquota, 0x22}, {@errors_continue}, {@noload}, {@nombcache}, {@usrjquota, 0x22}, {@errors_continue}, {@usrjquota}, {@barrier}]}, 0x1, 0x455, &(0x7f0000000d80)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b33000000000000000005000000080003"], 0x28}}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000380)=0x3) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) pipe2$9p(0x0, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = socket$kcm(0x2, 0x1, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r7, 0x80047437, &(0x7f00000007c0)) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000a00)={'gre0\x00', 0x0, 0x80, 0x7, 0x1000, 0xfffffffd, {{0x22, 0x4, 0x0, 0xb, 0x88, 0x68, 0x0, 0x2, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x89, 0xf, "1f908ebdab9898bcb1567dc7f9"}, @noop, @timestamp={0x44, 0x14, 0xa, 0x0, 0x4, [0x9, 0x51, 0x80000001, 0xfffffffd]}, @timestamp={0x44, 0xc, 0x7f, 0x0, 0x8, [0x0, 0x58]}, @rr={0x7, 0x7, 0x96, [@private=0xa010101]}, @timestamp_addr={0x44, 0x24, 0x40, 0x1, 0x1, [{@rand_addr=0x64010100, 0x7f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@loopback, 0x80}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x13, 0x1d, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @local, @rand_addr=0x64010101]}]}}}}}) sendmsg$inet6(r5, &(0x7f0000000780)={&(0x7f0000000240)={0xa, 0x4e21, 0x2, @mcast1, 0x6}, 0x7f, &(0x7f0000000280)=[{&(0x7f00000003c0)="287efa4ba81891909d86bf2904781c36061a0550dafeafd03e0923395028f8219f0708717643837b75e761415bb783fe2e1323a358f0f941945d5cfac4a9b2a90c59c8f51181a2b47a38cf30ddb1aa9517301756bbf8ac0154da8f59e11dedf094ec27da448a9a075053ba829bef55815f9e73af995923e9db1f38e31504", 0x7e}, {&(0x7f0000003a80)="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", 0x1000}], 0x2, &(0x7f0000001200)=ANY=[@ANYBLOB="240000001f400000290000003202ffff00000000bd982f010100000000000036940000000000000000000000000000578e58ea248197ac397c000000000000001c75da247d8f0fb8e82764c3a2ee23a2565cbb7d666bdb68a20bd043fe8b0251ad95720bdb7538a919e5809d9a7bc23310da3c9acec70a2ee26343df1ffdff475cf0d1a5c5f92975c5da922f2c8aa4a49579c668c6a23f1a", @ANYRESHEX=r5, @ANYBLOB="00000000500000000000000029000000370000000006000000000000c910ff010000000002000000000000000001c20400000009c2857530390400000005c9100000000000000000000000000000000100010000000000001400ffffff7f0000290000003400000001010000000000001400000000000000020000000800000009000000"], 0xa8}, 0x4000084) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000500)=0x1, r8, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000840)={0x8, 0x120, 0xfa00, {0x3, {0x1, 0xe08, "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", 0x0, 0x0, 0x5, 0x4, 0x82, 0x4, 0x4}, r8}}, 0x128) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x13b}, &(0x7f0000000000), &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 45.290483511s ago: executing program 4 (id=1374): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x15, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="7daa000000000000711014000000000089a3d4ff0000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setfsgid(0xee00) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @empty}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x42, 0x0, 0x0) r3 = socket(0xb, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 44.899330968s ago: executing program 4 (id=1380): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x200, 0x10000, 0x0, 0x6, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x30}, 0x94) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="05dff72e1800cd133816000000000000", @ANYRES32=0x0, @ANYBLOB="0800050004000000050053"], 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) setsockopt$inet6_opts(r0, 0x29, 0x40, 0x0, 0xd0060) 44.821566731s ago: executing program 4 (id=1382): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/13], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000200), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) 44.802936202s ago: executing program 5 (id=1383): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sys_enter\x00', r0, 0x0, 0x2}, 0x18) r1 = fsopen(&(0x7f0000000040)='ext2\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000080)='\x00H\xeb', 0x0, r1) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x362040, 0x0) process_mrelease(r2, 0x0) sync() r3 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="080000000000000000fff4000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r6}, 0x10) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000009500000000000000133629fb8c30"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r9, r8, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[], 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r3, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r10, &(0x7f0000000140)='./file0\x00') openat(r10, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664f26) read$watch_queue(r10, &(0x7f0000000100)=""/166, 0xa6) 44.758795594s ago: executing program 4 (id=1384): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) recvfrom$inet6(r0, 0x0, 0x0, 0x2100, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000000c0)=0x5, 0x4) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRESOCT=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r5, 0x0, 0x80}, 0x18) sync() r7 = socket$netlink(0x10, 0x3, 0x10) (async) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000bd30b4bd1b5149643516f0601f40b56f87191364d7e990d13bdb9b549ffee81f20f03bb27f0f88bc48a6d3abba2919eddca59019efa318e91d75a7c0c4078f3678a1b08740b3c14b53c0074088bf1d5fcbb571ff7aff128ac44fd0298fa9a08a734d8004c58e7b284ae197977a1fdc386c56735687097d476fe14cc33d2c55597148480c45"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) r10 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r10, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) (async) close(r6) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) pipe2$9p(&(0x7f00000027c0), 0x0) (async) socket(0x28, 0x5, 0x0) (async) r11 = socket(0x28, 0x805, 0x0) bind$vsock_stream(r11, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) 30.784325705s ago: executing program 33 (id=1366): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x7}, 0x20) 29.658233763s ago: executing program 34 (id=1383): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sys_enter\x00', r0, 0x0, 0x2}, 0x18) r1 = fsopen(&(0x7f0000000040)='ext2\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000080)='\x00H\xeb', 0x0, r1) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x362040, 0x0) process_mrelease(r2, 0x0) sync() r3 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="080000000000000000fff4000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r6}, 0x10) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000009500000000000000133629fb8c30"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r9, r8, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[], 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r3, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r10, &(0x7f0000000140)='./file0\x00') openat(r10, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664f26) read$watch_queue(r10, &(0x7f0000000100)=""/166, 0xa6) 29.629637455s ago: executing program 35 (id=1384): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) recvfrom$inet6(r0, 0x0, 0x0, 0x2100, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000000c0)=0x5, 0x4) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRESOCT=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r5, 0x0, 0x80}, 0x18) sync() r7 = socket$netlink(0x10, 0x3, 0x10) (async) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000bd30b4bd1b5149643516f0601f40b56f87191364d7e990d13bdb9b549ffee81f20f03bb27f0f88bc48a6d3abba2919eddca59019efa318e91d75a7c0c4078f3678a1b08740b3c14b53c0074088bf1d5fcbb571ff7aff128ac44fd0298fa9a08a734d8004c58e7b284ae197977a1fdc386c56735687097d476fe14cc33d2c55597148480c45"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) r10 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r10, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) (async) close(r6) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) pipe2$9p(&(0x7f00000027c0), 0x0) (async) socket(0x28, 0x5, 0x0) (async) r11 = socket(0x28, 0x805, 0x0) bind$vsock_stream(r11, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) 18.182726127s ago: executing program 1 (id=1703): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x2]}}) 18.11696071s ago: executing program 1 (id=1704): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00'}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0x1, 0x804, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00'}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee00}}, './file0\x00'}) lsetxattr$security_capability(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000500), &(0x7f0000000680)=@v3={0x3000000, [{0x7fffffff, 0x5}, {0x5, 0xb9d1}], r5}, 0x18, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000010) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x40081}, 0x0) r7 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x3c7}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r9, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={0x0}}, 0x8000) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a32000000005f6663a2e564a6626bdc55d7a5445a5456e0c1e070bf44bf388a00"/133], 0x54}}, 0x0) 17.981976806s ago: executing program 1 (id=1706): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x2]}}) 17.833025192s ago: executing program 1 (id=1710): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="090000000400000008000000"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x14, 0x3a, 0x229, 0x0, 0x25dfdbfc, {0xa}}, 0x14}}, 0x8000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x141a42, 0x1c2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x1701) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x44, &(0x7f0000000080)={0x2, 0x3, 0x17, 0x1}, 0x8, 0x20, 0x3, 0x0, 0x8, 0x404, 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x74}}, 0x0) copy_file_range(r7, 0x0, r5, 0x0, 0xffffffffa003e45c, 0x700000000000000) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f283e6d60200000000000000000000000100", [0x208, 0x2]}) r9 = open(&(0x7f0000000180)='./file1\x00', 0xe0142, 0x102) pwritev2(r9, &(0x7f0000001100)=[{&(0x7f0000001080)='\b', 0x1}], 0x1, 0x7000, 0x0, 0x3) shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) 17.498241837s ago: executing program 1 (id=1716): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01063d0000000000000028000000280000000200000000000000000000030000020000000200000000000000010000000000000104"], 0x0, 0x42}, 0x28) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000180)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00"/47], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x9, 0x80000000}}, './file0\x00'}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) 17.110315463s ago: executing program 1 (id=1720): socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$eJzs3MtvG8UfAPDvOk6a9PFLf6U8WloIFETFI2nSBz1wAYHEAQQSHIo4BSetSt0GNUGiVQSBQxDigCpxRxyR+As4wQUBJySucEeVEMqlhZPRenfTxLVDHk6c4s9H2nZmd92Z786OPTtjN4CuNZT+kUTsjohfI2Iwyy4/YSj76+bCbOWvhdlKErXaa38m9fNuLMxW8n9i8XW7sh21Wp7f0aTc+TcjxqvVyct5fmTm4jsj01euPnX+4vi5yXOTl8ZOnz5x/HDfqbGTbYkzjevGwfenDh148Y1rL1fOXHvrx6/T+u7OjxdxtNNQdnWberTdhXXYniXppNzBirAmabulzdVb7/+D0RMDi8cG44WPOlo5YFPVarVas8/n3FwN+A9LotM1ADqj+KBPn3+LbYuGHtvCH89mD0Bp3DfzLTtSjlJ+Tm/D82079UfEmbm/v0i32KR5CACApb5Nxz9PNhv/leKeJef9L19D2RsR/4+IfRFxV0Tsj4i7I+rn3hsR962x/MYVktvHP6Xr6wpsldLx3zP52tby8V8x+ou9PXluTz3+3uTs+erksfyaHI3eHWl+dNlLlvvu+V8+a9z3aT7NPrRk/JduafnFWDCvx/VywwTdxPjMeFuCT+P/MOJguVn8SRTLOElEHIiIg+ss4/zjXx1qdezf419BG9aZal9GPJa1/1w0xF9IWq5Pjj59auzkSH9UJ4+NFHfF7X76ef7VVuVvKP42SNt/Z9P7P4s/fUZM+iOmr1y9UF+vnV57GfO/fVxJWhzbv877vy95vZ7uy/e9Nz4zc3k0oi95Kc0OLNs/duu1Rb44P43/6JHm/X9f9nhWvxL3R0R6Ex+OiAci4sG87R6KiIcj4sgK8f/w3CNvtzrWuv1XmJVvozT+iRXaP33LS1O32n/tiZ4L33/Tqvzaqtr/RD11NN+zmve/1VZwI9cOAAAA7hSl+nfgk9LwYrpUGh7OvsO/P3aWqlPTM0+cnXr30kT2Xfm90VsqZroGl8yHjuZzw0V+rCF/PJ83/rxnoJ4frkxVJzodPHS5XS36f+r3nk7XDth0fq8F3Uv/h+6l/0P30v+he+n/0KX6mu/+YKvrAXTE2j//+zelHsDWM/6H7qX/Q/fS/6ErtfxtfGlDP/m/UxPl7VGNpomB7VGNIhGlbVGN9iVe+STrEtulPkWivOr/zGKdiR1ND3X6nQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA9/gkAAP//Uo/mdg==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000300)={0xfe000000, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0x700, 0x7}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}]}) 17.106287634s ago: executing program 36 (id=1720): socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000300)={0xfe000000, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0x700, 0x7}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}]}) 15.849542318s ago: executing program 7 (id=1740): gettid() (async) gettid() r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a2) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) (async) r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f00000003c0)={0x4, 0x8, 0x7f}) (async) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f00000003c0)={0x4, 0x8, 0x7f}) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001600)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000040), &(0x7f00000004c0)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000040), &(0x7f00000004c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)={0x14, 0x36, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x41000}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) mmap(&(0x7f0000861000/0x4000)=nil, 0x4000, 0x2, 0x40010, 0xffffffffffffffff, 0x136ac000) (async) mmap(&(0x7f0000861000/0x4000)=nil, 0x4000, 0x2, 0x40010, 0xffffffffffffffff, 0x136ac000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x7, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r5, &(0x7f0000000340)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x100013c, 0x20000000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x106a5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_bp={0x0, 0xb}, 0x1008, 0x800, 0x4000, 0x9, 0x8, 0xfffffffc, 0x0, 0x0, 0x3ff, 0x0, 0x3}, r1, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newtaction={0x104, 0x30, 0x1, 0x0, 0x0, {}, [{0xf0, 0x1, [@m_ct={0xec, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x5}, @TCA_CT_MARK={0x8, 0x10, 0x80000000}, @TCA_CT_LABELS={0x14, 0x7, "0118aae167fe4bb4d318e45cb16cfc7a"}, @TCA_CT_LABELS={0x14, 0x7, "370dc2dc946fa5de3e7588de87419640"}]}, {0x8a, 0x6, "72b23a50ae024709c9b9dfb7f99ffcb11cdb7f5cd03a189f44aafb9025921fedb14ba1bdc2b2f98dde6cb5e1b8aee708824f75ab52d1fbb61249feb688170baf0a3e4f8331439ab68be834c1595d06eb2079d4e75267b263a706c8cf396021d6638b122486a13a770174db21d733668274fa4e1aa9152be2649ea4eea6b86aab669054129005"}, {0xc}, {0xc}}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000800) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x34, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x72c533cb, 0xff}, 0x100000, 0xd, 0x8, 0x1, 0x8, 0x2020005, 0x101, 0x0, 0x400000, 0x0, 0x20000006}, 0x0, 0xc, r1, 0x2) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x72c533cb, 0xff}, 0x100000, 0xd, 0x8, 0x1, 0x8, 0x2020005, 0x101, 0x0, 0x400000, 0x0, 0x20000006}, 0x0, 0xc, r1, 0x2) r9 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r9, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r8, 0xc0145401, &(0x7f0000000040)={0x1, 0x1, 0xab0}) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r8, 0xc0145401, &(0x7f0000000040)={0x1, 0x1, 0xab0}) 15.438866385s ago: executing program 7 (id=1750): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf2501000000000000000841000000140018000080007564703a73797a320000000045455035"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 15.387798358s ago: executing program 7 (id=1751): r0 = syz_io_uring_setup(0x7272, &(0x7f0000000b80)={0x0, 0x86e4, 0x2, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, 0xfffffffffffffffe, 0x0) 15.315736531s ago: executing program 7 (id=1752): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x804, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00'}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081}, 0x0) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x3c7}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={0x0}}, 0x8000) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a32000000005f6663a2e564a6626bdc55d7a5445a5456e0c1e070bf44bf388a00"/133], 0x54}}, 0x0) 15.127109759s ago: executing program 7 (id=1753): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="090000000400000008000000"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x14, 0x3a, 0x229, 0x0, 0x25dfdbfc, {0xa}}, 0x14}}, 0x8000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x141a42, 0x1c2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x1701) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x44, &(0x7f0000000080)={0x2, 0x3, 0x17, 0x1}, 0x8, 0x20, 0x3, 0x0, 0x8, 0x404, 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) write$binfmt_script(r8, &(0x7f0000000200), 0xfea7) copy_file_range(r7, 0x0, r5, 0x0, 0xffffffffa003e45c, 0x700000000000000) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r9, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f283e6d60200000000000000000000000100", [0x208, 0x2]}) r10 = open(&(0x7f0000000180)='./file1\x00', 0xe0142, 0x102) pwritev2(r10, &(0x7f0000001100)=[{&(0x7f0000001080)='\b', 0x1}], 0x1, 0x7000, 0x0, 0x3) shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) 14.771045334s ago: executing program 7 (id=1756): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8f7ffffb702000008000000b703000000000000a5000000eeffffff95"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) setuid(0xee01) memfd_create(0x0, 0x0) pipe2(0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000480)="dc", 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180), 0x4) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@fadd={0x58, 0x114, 0x6, {{0x5, 0x6}, &(0x7f0000000400)=0x7, 0x0, 0xf, 0x4, 0x9, 0xfffffffffffffff9, 0x22, 0x7}}], 0x58, 0x8000}, 0x0) 13.492103759s ago: executing program 9 (id=1772): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000480)={0x53, 0xfffffffffffffffb, 0x6, 0x10, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="43d3b6d90727", 0x0, 0x2, 0x22, 0x1, 0x0}) 13.405177453s ago: executing program 9 (id=1775): prctl$PR_SET_NAME(0xf, &(0x7f0000000580)='+}[K\x00') syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}], [{@fsname={'fsname', 0x3d, '{,!\x00'}}, {@flag='sync'}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@audit}, {@subj_role={'subj_role', 0x3d, 'w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd'}}, {@flag='mand'}, {@obj_type={'obj_type', 0x3d, '!:,^\'q'}}, {@smackfsroot={'smackfsroot', 0x3d, 'min_batch_time'}}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x62, 0x38, 0x65, 0x34, 0x31, 0x63, 0x36], 0x2d, [0x36, 0x30, 0x34], 0x2d, [0x0, 0x0, 0x60, 0x63], 0x2d, [0xb, 0x63, 0x37, 0x6f], 0x2d, [0x32, 0x66, 0x37, 0x36, 0x66, 0x3b, 0x65, 0x35]}}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000240)=@file={0x0, './bus\x00'}, 0x6e) brk(0x800000000000) semget$private(0x0, 0x0, 0x208) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x8001, 0x1000000000000800}, &(0x7f0000000800)) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000440)) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000001540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001500)={&(0x7f0000000980)=ANY=[@ANYBLOB="44020000", @ANYRES16=0x0, @ANYBLOB="200029bd7000fedbdf250900000028000180140002006970365f76746930000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="6c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08d29f3b", @ANYRES32=0x0, @ANYBLOB="08000300020000001400020062726964676530000000000000000000080003000200000014000200766c616e3000000000000000000000000800030002000000080003000100000008000300000000004400018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="38000180080003000200000008000300030000001400020076657468305f746f5f6272696467650008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="8800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006e7230000000000000000000000000001400020076657468315f746f5f626f6e64000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006970366772657461703000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="14000180080003000000000008000300020000000c00018008000300020000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="640001801400020076657468305f746f5f626f6e6400000008000300020000001400020076657468305f746f5f626f6e64000000140002006d61637365633000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="14000200697036746e6c30000000000000000000"], 0x244}, 0x1, 0x0, 0x0, 0x10}, 0x2000a011) close_range(r2, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) 13.096700756s ago: executing program 9 (id=1780): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x8, 0x8, 0x4, 0x9, 0x0, r0, 0xffffffe4, '\x00', 0x0, r1, 0x2, 0x0, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000000), &(0x7f00000003c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 12.896043465s ago: executing program 9 (id=1782): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (fail_nth: 6) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000380)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'virt_wifi0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) 12.381777367s ago: executing program 9 (id=1788): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="090000000400000008000000"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x14, 0x3a, 0x229, 0x0, 0x25dfdbfc, {0xa}}, 0x14}}, 0x8000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x141a42, 0x1c2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x1701) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x44, &(0x7f0000000080)={0x2, 0x3, 0x17, 0x1}, 0x8, 0x20, 0x3, 0x0, 0x8, 0x404, 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000200), 0xfea7) copy_file_range(r7, 0x0, r5, 0x0, 0xffffffffa003e45c, 0x700000000000000) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r9, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f283e6d60200000000000000000000000100", [0x208, 0x2]}) r10 = open(&(0x7f0000000180)='./file1\x00', 0xe0142, 0x102) pwritev2(r10, &(0x7f0000001100)=[{&(0x7f0000001080)='\b', 0x1}], 0x1, 0x7000, 0x0, 0x3) shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) 11.943829566s ago: executing program 9 (id=1794): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0x8000, 0x4) sendto$packet(r1, &(0x7f0000000180)="0b03", 0x2, 0x0, &(0x7f0000000140)={0x11, 0x19, r2}, 0x14) 10.059390537s ago: executing program 6 (id=1810): r0 = syz_io_uring_setup(0x7272, &(0x7f0000000b80)={0x0, 0x86e4, 0x2, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, 0xfffffffffffffffe, 0x0) 10.058926237s ago: executing program 6 (id=1811): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009900"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)="7cc1ad1c6f75", &(0x7f0000000240), 0x7, r3}, 0x38) 10.029853338s ago: executing program 6 (id=1812): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r0, 0x1, 0x70bd29, 0x25dfdbfe, {{0x1, 0x0, 0xa6ff}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 9.98560677s ago: executing program 6 (id=1813): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="090000000400000008000000"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x14, 0x3a, 0x229, 0x0, 0x25dfdbfc, {0xa}}, 0x14}}, 0x8000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x141a42, 0x1c2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x1701) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x44, &(0x7f0000000080)={0x2, 0x3, 0x17, 0x1}, 0x8, 0x20, 0x3, 0x0, 0x8, 0x404, 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200), 0xfea7) copy_file_range(r7, 0x0, r5, 0x0, 0xffffffffa003e45c, 0x700000000000000) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f283e6d60200000000000000000000000100", [0x208, 0x2]}) r9 = open(&(0x7f0000000180)='./file1\x00', 0xe0142, 0x102) pwritev2(r9, &(0x7f0000001100)=[{&(0x7f0000001080)='\b', 0x1}], 0x1, 0x7000, 0x0, 0x3) shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) 9.661568544s ago: executing program 6 (id=1814): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000000010000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0x8000, 0x4) sendto$packet(r2, &(0x7f0000000180)="0b03", 0x2, 0x0, &(0x7f0000000140)={0x11, 0x19, r3}, 0x14) 9.304547609s ago: executing program 6 (id=1817): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000800)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1a9851, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x9) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000001980)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x5}}, './file0\x00'}) 9.257338592s ago: executing program 37 (id=1817): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000800)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1a9851, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x9) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000001980)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x5}}, './file0\x00'}) 4.660803299s ago: executing program 8 (id=1844): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYBLOB='.\x00'], 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 4.523247565s ago: executing program 8 (id=1845): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r2, 0x11, 0xb, &(0x7f0000000200)=0x6, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0x6f, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x68, 0x0, 0x10, 0x88, 0x0, @remote, @local}, {0x4e24, 0x4e24, 0x4d, 0x0, @wg=@data={0x4, 0x2000007f, 0x574fa06c, "1bb7f57f62651666b96c494171f201afaf70a24197ff7762d0455e1acce336bb89f71e7ab27c77dff4e24e4233ae94c87910c4f318"}}}}}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x81f00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) recvfrom$unix(r1, &(0x7f0000000500)=""/220, 0xdc, 0x20, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r0, r6, 0x0, 0xc19) 2.859197727s ago: executing program 2 (id=1868): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x804, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00'}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x40081}, 0x0) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x3c7}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={0x0}}, 0x8000) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a32000000005f6663a2e564a6626bdc55d7a5445a5456e0c1e070bf44bf388a00"/133], 0x54}}, 0x0) 2.55385794s ago: executing program 2 (id=1870): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_clone(0x80020100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') syz_read_part_table(0x4066, &(0x7f0000008100)="$eJzszzFKw3AUBvAvrcEogSLoJIjFwU3i5pRbdJeewclBxdzEUTyA9/AOjl4hDpJIrYNLQeX3m97Hx3vJP/wR1TgVSZ6XT3tJjufpmuaj3Br6nc+l5jzlbjVJneRq/ebicfP/DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/FKTlXSbpHu5Ph1yNTbLw3Q3bS7qpDqYJffTlO1Rkf1kfvbN3WnymqRI8pZkMdvsMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/+JyJW1/rethuFtffThJ15Zj2/d9/+PPVsk7u3MsAAAAgACMMskoY+jfCJa+VwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMYOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBABgAAAECYv3Ue7QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbgoAAP//SIAVRg==") fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r1, &(0x7f00000003c0)='ns/ipc\x00') socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x7fffffff, @empty, 0xfffffffe}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000680)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd603081140048110000000000000000000000000000000000ff02000000000000000000000000000100000e2200489078037bf0ed9461a59f58648300000c03000000501d85d4c30be8f7096bcac751c47a7a64c0905ddbda95816e8c3dfd57603da1f0d40bdeece64d1a6888200cff6e70c3ee5d615dceaee2d000a15b79c169a51c48add29f55"], 0x0) r5 = socket$packet(0x11, 0xa, 0x300) r6 = openat(r2, &(0x7f0000000240)='.\x00', 0x440, 0x14d) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYRES8=r0], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r8}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r9, 0x0, 0xfffffffffffffffd}, 0x18) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x6000) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r10, 0x0, 0x44000) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f21273"], &(0x7f0000000100)='GPL\x00'}, 0x94) 2.227327014s ago: executing program 0 (id=1873): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c03400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@noload}]}, 0xea, 0x472, &(0x7f0000000f40)="$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") mount_setattr(0xffffffffffffffff, 0x0, 0x9800, 0x0, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000150000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x28000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xb4, 0x30, 0xffff, 0x70bd25, 0x0, {}, [{0xa0, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x7, 0x2, 0x9, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) 2.015355903s ago: executing program 2 (id=1874): capset(0x0, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000480)={0x53, 0xfffffffffffffffb, 0x6, 0x10, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="43d3b6d90727", 0x0, 0x2, 0x22, 0x1, 0x0}) 1.990087014s ago: executing program 2 (id=1875): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="090000000400000008000000"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x14, 0x3a, 0x229, 0x0, 0x25dfdbfc, {0xa}}, 0x14}}, 0x8000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x141a42, 0x1c2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x1701) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x44, &(0x7f0000000080)={0x2, 0x3, 0x17, 0x1}, 0x8, 0x20, 0x3, 0x0, 0x8, 0x404, 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) write$binfmt_script(r7, &(0x7f0000000200), 0xfea7) copy_file_range(0xffffffffffffffff, 0x0, r5, 0x0, 0xffffffffa003e45c, 0x700000000000000) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f283e6d60200000000000000000000000100", [0x208, 0x2]}) r9 = open(&(0x7f0000000180)='./file1\x00', 0xe0142, 0x102) pwritev2(r9, &(0x7f0000001100)=[{&(0x7f0000001080)='\b', 0x1}], 0x1, 0x7000, 0x0, 0x3) shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) 1.526791974s ago: executing program 8 (id=1876): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}], [{@fsname={'fsname', 0x3d, '{,!\x00'}}, {@flag='sync'}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@audit}, {@subj_role={'subj_role', 0x3d, 'w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd'}}, {@flag='mand'}, {@obj_type={'obj_type', 0x3d, '!:,^\'q'}}, {@smackfsroot={'smackfsroot', 0x3d, 'min_batch_time'}}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x62, 0x38, 0x65, 0x34, 0x31, 0x63, 0x36], 0x2d, [0x36, 0x30, 0x34], 0x2d, [0x0, 0x0, 0x60, 0x63], 0x2d, [0xb, 0x63, 0x37, 0x6f], 0x2d, [0x32, 0x66, 0x37, 0x36, 0x66, 0x3b, 0x65, 0x35]}}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000240)=@file={0x0, './bus\x00'}, 0x6e) brk(0x800000000000) semget$private(0x0, 0x0, 0x208) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x8001, 0x1000000000000800}, &(0x7f0000000800)) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000440)) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000001540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001500)={&(0x7f0000000980)=ANY=[@ANYBLOB="44020000", @ANYRES16=0x0, @ANYBLOB="200029bd7000fedbdf250900000028000180140002006970365f76746930000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="6c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08d29f3b", @ANYRES32=0x0, @ANYBLOB="08000300020000001400020062726964676530000000000000000000080003000200000014000200766c616e3000000000000000000000000800030002000000080003000100000008000300000000004400018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="38000180080003000200000008000300030000001400020076657468305f746f5f6272696467650008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="8800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006e7230000000000000000000000000001400020076657468315f746f5f626f6e64000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006970366772657461703000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="14000180080003000000000008000300020000000c00018008000300020000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="640001801400020076657468305f746f5f626f6e6400000008000300020000001400020076657468305f746f5f626f6e64000000140002006d61637365633000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="14000200697036746e6c30000000000000000000"], 0x244}, 0x1, 0x0, 0x0, 0x10}, 0x2000a011) close_range(r2, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) 1.341645782s ago: executing program 8 (id=1877): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf2501000000000000000841000000140018000080007564703a73797a320000000045455035"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.235093796s ago: executing program 8 (id=1878): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="090000000400000008000000"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x14, 0x3a, 0x229, 0x0, 0x25dfdbfc, {0xa}}, 0x14}}, 0x8000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x141a42, 0x1c2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x1701) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) write$binfmt_script(r7, &(0x7f0000000200), 0xfea7) copy_file_range(r6, 0x0, r5, 0x0, 0xffffffffa003e45c, 0x700000000000000) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f283e6d60200000000000000000000000100", [0x208, 0x2]}) r9 = open(&(0x7f0000000180)='./file1\x00', 0xe0142, 0x102) pwritev2(r9, &(0x7f0000001100)=[{&(0x7f0000001080)='\b', 0x1}], 0x1, 0x7000, 0x0, 0x3) shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) 1.009045716s ago: executing program 2 (id=1879): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pidfd_getfd(0xffffffffffffffff, r1, 0x0) 796.798725ms ago: executing program 8 (id=1880): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x300}]}}}]}, 0x50}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pidfd_getfd(0xffffffffffffffff, r1, 0x0) 415.179522ms ago: executing program 2 (id=1881): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r0, 0x5, 0x4) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r3 = socket(0x2, 0x3, 0xff) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='macvlan1\x00', 0x10) setsockopt$inet_int(r3, 0x0, 0x3, 0x0, 0x0) recvmmsg(r3, &(0x7f00000071c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000000300)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}], 0x1, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000001980)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x5}}, './file0\x00'}) 407.052073ms ago: executing program 38 (id=1881): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r0, 0x5, 0x4) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r3 = socket(0x2, 0x3, 0xff) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='macvlan1\x00', 0x10) setsockopt$inet_int(r3, 0x0, 0x3, 0x0, 0x0) recvmmsg(r3, &(0x7f00000071c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000000300)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}], 0x1, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000001980)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x5}}, './file0\x00'}) 395.060282ms ago: executing program 0 (id=1883): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)="7cc1ad1c6f75", &(0x7f0000000240), 0x7, r2}, 0x38) 345.705815ms ago: executing program 0 (id=1884): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00'}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TCFLSH(r1, 0x8925, 0x200000000000004) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r3 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e1d, 0x101, @empty}, {0xa, 0x4e22, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x899, 0x1]}}, 0x5c) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1d, 0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$RTC_WKALM_RD(r5, 0x80287010, &(0x7f0000000180)) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010329bd7000fcdbdf252400000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6064e22000300000001250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000001cc0)=ANY=[], 0x1, 0x264, &(0x7f0000003080)="$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") rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)='.\x02\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x18) kcmp(0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 243.386719ms ago: executing program 0 (id=1885): capset(0x0, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000480)={0x53, 0xfffffffffffffffb, 0x6, 0x10, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="43d3b6d90727", 0x0, 0x2, 0x22, 0x1, 0x0}) 242.911269ms ago: executing program 0 (id=1886): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x2, 0x2, 0x7ffffffe, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x9d}, 0x18) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x98}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='cpu~00\t&&') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r3, 0x0, 0x0, 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=1887): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000001f) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000f00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELRULE={0x3c8, 0x8, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0xcb, 0x7, 0x1, 0x0, "c260319e05ee0d61bfb639105280188269316416d631aa2a6a5da18feca81cdbc1bf9128e8e64613e581232e2f914da67adef6a35eef71f3ac7aeda0f8a1a0f6a221cd23216f08d2e18138de861b232febd4b07cc0b15427c8fb4004fefc4c1a351c2f8f62452ff3c1afa026fa6aaef380c70b24ae3cacbdf2279353477ea7326bb9d694a0e13b1a4bbbd1a6e2d6792baf10c2818ffc4d73624eed63d417283a7e9eaa3120a506b97865efb21d442f6eccb5fad7b87ce55238bc066b3ebbbd31f47d0217975f22"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_EXPRESSIONS={0x1d4, 0x4, 0x0, 0x1, [{0x1bc, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1a8, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x12c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xaa, 0x1, "f7f9946d02dbd61e8dd96f543d2826718f5ce2a0f7dc0b0fafc99d26d4f140a5ffab213fb93098264dd5cb18748c5be4b6ba82ef73836ee322be7fd1d9e82a5ce4db142ca05efb0ecd9db32fadc8b05a89e6ca3e9bbb4ba49f9a3335bf247cc8cbcae80d54be1d01f8089251d32200a24da81ec8448d3c2adcbb902890c7680e1b20b2f1dc132db01ba9bc901866540ec4a67897b9516627de89a73aac82d258ac5f4cebb780"}, @NFTA_DATA_VALUE={0x38, 0x1, "1541f34506b756fa854f6e81791b07b4f31189a923ca1acb4f3181d1453ec4858741595c1b63ed5833d8f1f82c8542e599b6bf66"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x19}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_IMMEDIATE_DATA={0x58, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_USERDATA={0xe4, 0x7, 0x1, 0x0, "b1f675711909488b3977f6f1ac57202aae3d0ee26291020d975e0f2a849b3c1490bb81989f2b0c99e4ce11f460114123b494c6aa08bc5e63b56962a465f797d0f0927a1aa4e7e82385a9b399a55e24312eafdd4380bb024fc601b40a7a7f5ff9d5416e9baa5f9e16adb65d79c0e8b14d1f88385442e2ec7d7687a6958cdb40bba45273b039e07db92b76a4fe9d41388d8cf753b8b32d89274bf8357b87efba26f7c52c1fe38a50dc86b57640501f628d90fb7157ecc04d47c22b567383be64997c3131cbbf720516aa63975a4cb61fead4fe6a8816a33427deacfff817a36fa8"}]}, @NFT_MSG_DELTABLE={0x58, 0x2, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_DELSETELEM={0x18, 0xe, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, @NFT_MSG_DELTABLE={0x74, 0x2, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x4d4}, 0x1, 0x0, 0x0, 0x99}, 0x5005) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x10000}}, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x4, 0xd, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000880)=[r4, r1, r1, r4, r4, r4, r4], &(0x7f00000008c0), 0x10, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={0x0, r5}, 0x18) r6 = epoll_create(0xd) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) epoll_pwait2(r6, &(0x7f0000000100)=[{}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000300)={[{@abort}]}, 0xfe, 0x24b, &(0x7f0000000c80)="$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") pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0x1, 0x811) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@can={{0x4, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "5f758bb2bc7f61ee"}, 0x10}, 0x1, 0x0, 0x0, 0x20008844}, 0xe82c05c4fb167ff9) kernel console output (not intermixed with test programs): dware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 108.165017][ T7811] Call Trace: [ 108.165022][ T7811] [ 108.165029][ T7811] __dump_stack+0x1d/0x30 [ 108.165100][ T7811] dump_stack_lvl+0xe8/0x140 [ 108.165121][ T7811] dump_stack+0x15/0x1b [ 108.165134][ T7811] should_fail_ex+0x265/0x280 [ 108.165154][ T7811] should_fail_alloc_page+0xf2/0x100 [ 108.165182][ T7811] __alloc_frozen_pages_noprof+0xff/0x360 [ 108.165256][ T7811] alloc_pages_mpol+0xb3/0x260 [ 108.165277][ T7811] vma_alloc_folio_noprof+0x1aa/0x300 [ 108.165301][ T7811] do_wp_page+0xf60/0x2510 [ 108.165331][ T7811] ? __rcu_read_lock+0x37/0x50 [ 108.165355][ T7811] handle_mm_fault+0x77d/0x2be0 [ 108.165458][ T7811] ? __rcu_read_unlock+0x4f/0x70 [ 108.165481][ T7811] ? mt_find+0x21b/0x330 [ 108.165613][ T7811] do_user_addr_fault+0x3fe/0x1080 [ 108.165635][ T7811] ? __rcu_read_unlock+0x4f/0x70 [ 108.165660][ T7811] exc_page_fault+0x62/0xa0 [ 108.165703][ T7811] asm_exc_page_fault+0x26/0x30 [ 108.165787][ T7811] RIP: 0010:__put_user_4+0xd/0x20 [ 108.165813][ T7811] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 108.165827][ T7811] RSP: 0018:ffffc90019e0fe78 EFLAGS: 00050206 [ 108.165841][ T7811] RAX: 000000000000000e RBX: 0000000000000000 RCX: 00002000000029c0 [ 108.165851][ T7811] RDX: ffff88811add3180 RSI: 000000000000000f RDI: 0000000000000000 [ 108.165863][ T7811] RBP: 000000000000000e R08: 0001ffff8684810f R09: 0000000000000000 [ 108.165959][ T7811] R10: 000188810cd31960 R11: 000188810cd31967 R12: 00002000000029c0 [ 108.165970][ T7811] R13: 0000000000000005 R14: 0000000000000001 R15: 0000000000000000 [ 108.165986][ T7811] __sys_socketpair+0xa6/0x430 [ 108.166008][ T7811] ? ksys_write+0x192/0x1a0 [ 108.166033][ T7811] __x64_sys_socketpair+0x52/0x60 [ 108.166135][ T7811] x64_sys_call+0x2bf6/0x3000 [ 108.166152][ T7811] do_syscall_64+0xd2/0x200 [ 108.166168][ T7811] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 108.166213][ T7811] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 108.166251][ T7811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.166268][ T7811] RIP: 0033:0x7f06be17f749 [ 108.166282][ T7811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.166298][ T7811] RSP: 002b:00007f06bcbc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 108.166314][ T7811] RAX: ffffffffffffffda RBX: 00007f06be3d6090 RCX: 00007f06be17f749 [ 108.166325][ T7811] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 108.166335][ T7811] RBP: 00007f06bcbc6090 R08: 0000000000000000 R09: 0000000000000000 [ 108.166371][ T7811] R10: 00002000000029c0 R11: 0000000000000246 R12: 0000000000000001 [ 108.166384][ T7811] R13: 00007f06be3d6128 R14: 00007f06be3d6090 R15: 00007fffea59e078 [ 108.166403][ T7811] [ 108.538276][ T7812] loop3: detected capacity change from 0 to 128 [ 108.548621][ T7812] FAT-fs (loop3): error, clusters badly computed (2 != 0) [ 108.555779][ T7812] FAT-fs (loop3): Filesystem has been set read-only [ 108.562589][ T7812] FAT-fs (loop3): error, clusters badly computed (3 != 1) [ 108.570077][ T7812] FAT-fs (loop3): error, clusters badly computed (4 != 2) [ 108.696297][ T7819] xt_CT: No such helper "snmp" [ 108.744325][ T7826] loop5: detected capacity change from 0 to 1024 [ 108.763113][ T7826] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.780789][ T7826] FAULT_INJECTION: forcing a failure. [ 108.780789][ T7826] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 108.794122][ T7826] CPU: 0 UID: 0 PID: 7826 Comm: syz.5.1286 Not tainted syzkaller #0 PREEMPT(voluntary) [ 108.794169][ T7826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 108.794179][ T7826] Call Trace: [ 108.794186][ T7826] [ 108.794254][ T7826] __dump_stack+0x1d/0x30 [ 108.794273][ T7826] dump_stack_lvl+0xe8/0x140 [ 108.794290][ T7826] dump_stack+0x15/0x1b [ 108.794305][ T7826] should_fail_ex+0x265/0x280 [ 108.794343][ T7826] should_fail_alloc_page+0xf2/0x100 [ 108.794370][ T7826] __alloc_frozen_pages_noprof+0xff/0x360 [ 108.794475][ T7826] alloc_pages_mpol+0xb3/0x260 [ 108.794494][ T7826] folio_alloc_noprof+0x97/0x150 [ 108.794514][ T7826] filemap_alloc_folio_noprof+0x66/0x210 [ 108.794622][ T7826] __filemap_get_folio+0x28f/0x650 [ 108.794704][ T7826] ext4_block_zero_page_range+0x8c/0x620 [ 108.794727][ T7826] ext4_zero_partial_blocks+0xee/0x190 [ 108.794806][ T7826] ext4_punch_hole+0x450/0x770 [ 108.794826][ T7826] ? file_modified_flags+0x249/0x350 [ 108.794853][ T7826] ext4_fallocate+0x2d7/0x2f0 [ 108.794894][ T7826] vfs_fallocate+0x3b6/0x400 [ 108.794988][ T7826] __x64_sys_fallocate+0x7a/0xd0 [ 108.795072][ T7826] x64_sys_call+0x2518/0x3000 [ 108.795142][ T7826] do_syscall_64+0xd2/0x200 [ 108.795161][ T7826] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 108.795184][ T7826] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 108.795252][ T7826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.795273][ T7826] RIP: 0033:0x7f8f527af749 [ 108.795289][ T7826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.795305][ T7826] RSP: 002b:00007f8f5120f038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 108.795352][ T7826] RAX: ffffffffffffffda RBX: 00007f8f52a05fa0 RCX: 00007f8f527af749 [ 108.795362][ T7826] RDX: 0000000000000f00 RSI: 0000000000000003 RDI: 0000000000000005 [ 108.795373][ T7826] RBP: 00007f8f5120f090 R08: 0000000000000000 R09: 0000000000000000 [ 108.795384][ T7826] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 108.795395][ T7826] R13: 00007f8f52a06038 R14: 00007f8f52a05fa0 R15: 00007ffe62de50d8 [ 108.795412][ T7826] [ 109.018797][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.030416][ T3749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.070370][ T7834] loop4: detected capacity change from 0 to 1024 [ 109.111021][ T7834] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.186165][ T29] kauditd_printk_skb: 358 callbacks suppressed [ 109.186178][ T29] audit: type=1326 audit(1764512244.646:4833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7848 comm="syz.5.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f527af749 code=0x7ffc0000 [ 109.218573][ T29] audit: type=1326 audit(1764512244.686:4834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7848 comm="syz.5.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8f527af749 code=0x7ffc0000 [ 109.242187][ T29] audit: type=1326 audit(1764512244.686:4835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7848 comm="syz.5.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f527af749 code=0x7ffc0000 [ 109.265715][ T29] audit: type=1326 audit(1764512244.686:4836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7848 comm="syz.5.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f527af749 code=0x7ffc0000 [ 109.289098][ T29] audit: type=1326 audit(1764512244.686:4837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7848 comm="syz.5.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f527af749 code=0x7ffc0000 [ 109.312510][ T29] audit: type=1326 audit(1764512244.686:4838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7848 comm="syz.5.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f527af749 code=0x7ffc0000 [ 109.335945][ T29] audit: type=1326 audit(1764512244.686:4839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7848 comm="syz.5.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f527af749 code=0x7ffc0000 [ 109.359363][ T29] audit: type=1326 audit(1764512244.686:4840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7848 comm="syz.5.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f527af749 code=0x7ffc0000 [ 109.382756][ T29] audit: type=1326 audit(1764512244.686:4841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7848 comm="syz.5.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f527af749 code=0x7ffc0000 [ 109.406265][ T29] audit: type=1326 audit(1764512244.686:4842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7848 comm="syz.5.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f527af749 code=0x7ffc0000 [ 109.443941][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.605310][ T7855] v speed is unknown, defaulting to 1000 [ 109.657991][ T7855] lo speed is unknown, defaulting to 1000 [ 110.232453][ T7852] Process accounting resumed [ 110.320538][ T7860] FAULT_INJECTION: forcing a failure. [ 110.320538][ T7860] name failslab, interval 1, probability 0, space 0, times 0 [ 110.333210][ T7860] CPU: 0 UID: 0 PID: 7860 Comm: syz.3.1298 Not tainted syzkaller #0 PREEMPT(voluntary) [ 110.333264][ T7860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 110.333274][ T7860] Call Trace: [ 110.333280][ T7860] [ 110.333287][ T7860] __dump_stack+0x1d/0x30 [ 110.333310][ T7860] dump_stack_lvl+0xe8/0x140 [ 110.333330][ T7860] dump_stack+0x15/0x1b [ 110.333404][ T7860] should_fail_ex+0x265/0x280 [ 110.333421][ T7860] should_failslab+0x8c/0xb0 [ 110.333469][ T7860] kmem_cache_alloc_noprof+0x50/0x480 [ 110.333492][ T7860] ? inet_bind_bucket_create+0x2e/0x100 [ 110.333599][ T7860] inet_bind_bucket_create+0x2e/0x100 [ 110.333695][ T7860] inet_csk_get_port+0x97a/0x10b0 [ 110.333724][ T7860] ? __pfx_inet_csk_get_port+0x10/0x10 [ 110.333774][ T7860] inet_csk_listen_start+0xcd/0x1c0 [ 110.333848][ T7860] inet_listen+0x1b1/0x200 [ 110.333866][ T7860] __x64_sys_listen+0x110/0x170 [ 110.333890][ T7860] x64_sys_call+0x206c/0x3000 [ 110.333907][ T7860] do_syscall_64+0xd2/0x200 [ 110.333965][ T7860] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 110.333988][ T7860] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 110.334015][ T7860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.334037][ T7860] RIP: 0033:0x7f9803d4f749 [ 110.334082][ T7860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.334099][ T7860] RSP: 002b:00007f98027b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 110.334193][ T7860] RAX: ffffffffffffffda RBX: 00007f9803fa5fa0 RCX: 00007f9803d4f749 [ 110.334205][ T7860] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 110.334216][ T7860] RBP: 00007f98027b7090 R08: 0000000000000000 R09: 0000000000000000 [ 110.334226][ T7860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.334354][ T7860] R13: 00007f9803fa6038 R14: 00007f9803fa5fa0 R15: 00007ffc9f820218 [ 110.334371][ T7860] [ 110.562653][ T7859] loop4: detected capacity change from 0 to 512 [ 110.606481][ T7859] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 110.673808][ T7859] EXT4-fs (loop4): 1 truncate cleaned up [ 110.729815][ T7853] Process accounting resumed [ 110.738352][ T7859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.822795][ T7872] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1301'. [ 110.849303][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.948524][ T7883] loop4: detected capacity change from 0 to 512 [ 110.980424][ T7883] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.1305: corrupted in-inode xattr: invalid ea_ino [ 111.004522][ T7890] loop3: detected capacity change from 0 to 512 [ 111.037385][ T7883] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1305: couldn't read orphan inode 15 (err -117) [ 111.059610][ T7890] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 111.070412][ T7894] can: request_module (can-proto-4) failed. [ 111.100209][ T7890] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1308: bg 0: block 384: padding at end of block bitmap is not set [ 111.115514][ T7883] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.148431][ T7894] netlink: 'syz.0.1310': attribute type 10 has an invalid length. [ 111.156702][ T7894] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1310'. [ 111.167948][ T7898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1311'. [ 111.176379][ T7890] EXT4-fs (loop3): Remounting filesystem read-only [ 111.183864][ T7890] EXT4-fs (loop3): 1 truncate cleaned up [ 111.190487][ T7890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.193795][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.229531][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.272858][ T7904] loop3: detected capacity change from 0 to 1024 [ 111.292487][ T7904] EXT4-fs: Ignoring removed orlov option [ 111.298173][ T7904] ext4: Unknown parameter 'fsname' [ 111.418127][ T7910] tipc: Enabling of bearer rejected, already enabled [ 111.454072][ T7915] __nla_validate_parse: 1 callbacks suppressed [ 111.454085][ T7915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1318'. [ 111.622475][ T7926] can: request_module (can-proto-4) failed. [ 111.649464][ T7926] netlink: 'syz.0.1321': attribute type 10 has an invalid length. [ 111.657702][ T7926] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1321'. [ 111.691516][ T7931] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1323'. [ 111.823135][ T7940] xt_hashlimit: max too large, truncated to 1048576 [ 111.915975][ T7947] can: request_module (can-proto-4) failed. [ 111.967782][ T7947] netlink: 'syz.0.1330': attribute type 10 has an invalid length. [ 111.976144][ T7947] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1330'. [ 112.027759][ T7964] loop1: detected capacity change from 0 to 512 [ 112.076058][ T7964] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.1335: corrupted in-inode xattr: invalid ea_ino [ 112.177250][ T7964] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1335: couldn't read orphan inode 15 (err -117) [ 112.210486][ T7964] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.237959][ T7964] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1335'. [ 112.248247][ T7982] FAULT_INJECTION: forcing a failure. [ 112.248247][ T7982] name failslab, interval 1, probability 0, space 0, times 0 [ 112.260953][ T7982] CPU: 0 UID: 0 PID: 7982 Comm: syz.5.1339 Not tainted syzkaller #0 PREEMPT(voluntary) [ 112.260981][ T7982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 112.260991][ T7982] Call Trace: [ 112.260997][ T7982] [ 112.261005][ T7982] __dump_stack+0x1d/0x30 [ 112.261086][ T7982] dump_stack_lvl+0xe8/0x140 [ 112.261106][ T7982] dump_stack+0x15/0x1b [ 112.261121][ T7982] should_fail_ex+0x265/0x280 [ 112.261139][ T7982] should_failslab+0x8c/0xb0 [ 112.261199][ T7982] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 112.261249][ T7982] ? alloc_inode+0x9a/0x170 [ 112.261268][ T7982] ? alloc_inode+0x27/0x170 [ 112.261287][ T7982] alloc_inode+0x9a/0x170 [ 112.261384][ T7982] alloc_anon_inode+0x1e/0x170 [ 112.261405][ T7982] aio_setup_ring+0x91/0x760 [ 112.261431][ T7982] ioctx_alloc+0x2c4/0x4e0 [ 112.261457][ T7982] ? fput+0x8f/0xc0 [ 112.261472][ T7982] __se_sys_io_setup+0x6b/0x1b0 [ 112.261494][ T7982] __x64_sys_io_setup+0x31/0x40 [ 112.261516][ T7982] x64_sys_call+0x2f0e/0x3000 [ 112.261595][ T7982] do_syscall_64+0xd2/0x200 [ 112.261616][ T7982] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 112.261706][ T7982] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 112.261732][ T7982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.261805][ T7982] RIP: 0033:0x7f8f527af749 [ 112.261821][ T7982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.261836][ T7982] RSP: 002b:00007f8f5120f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 112.261852][ T7982] RAX: ffffffffffffffda RBX: 00007f8f52a05fa0 RCX: 00007f8f527af749 [ 112.261863][ T7982] RDX: 0000000000000000 RSI: 0000200000002400 RDI: 00000000000008f0 [ 112.261887][ T7982] RBP: 00007f8f5120f090 R08: 0000000000000000 R09: 0000000000000000 [ 112.261901][ T7982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.261961][ T7982] R13: 00007f8f52a06038 R14: 00007f8f52a05fa0 R15: 00007ffe62de50d8 [ 112.261979][ T7982] [ 112.509097][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.554877][ T8000] can: request_module (can-proto-4) failed. [ 112.628052][ T8000] netlink: 'syz.1.1345': attribute type 10 has an invalid length. [ 112.636303][ T8000] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1345'. [ 112.642724][ T8009] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1349'. [ 112.654342][ T8009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1349'. [ 112.667311][ T8010] netlink: 'syz.5.1350': attribute type 3 has an invalid length. [ 112.675135][ T8010] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1350'. [ 112.693462][ T8012] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1349'. [ 112.715361][ T8012] loop4: detected capacity change from 0 to 1024 [ 112.751091][ T8016] 9pnet_fd: Insufficient options for proto=fd [ 112.831920][ T8010] loop5: detected capacity change from 0 to 512 [ 112.840386][ T8010] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 112.857863][ T8010] EXT4-fs (loop5): invalid journal inode [ 112.873893][ T8010] EXT4-fs (loop5): can't get journal size [ 112.882544][ T8010] EXT4-fs (loop5): 1 truncate cleaned up [ 112.888690][ T8010] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.996866][ T8012] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 113.005734][ T8012] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.131444][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.167926][ T8031] xt_hashlimit: max too large, truncated to 1048576 [ 113.214319][ T8031] loop3: detected capacity change from 0 to 512 [ 113.257820][ T8031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 113.295456][ T8031] ext4 filesystem being mounted at /268/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.409939][ T8047] can: request_module (can-proto-4) failed. [ 113.436031][ T8047] netlink: 'syz.1.1361': attribute type 10 has an invalid length. [ 113.447006][ T8031] usb usb8: check_ctrlrecip: process 8031 (syz.3.1356) requesting ep 01 but needs 81 [ 113.456546][ T8031] usb usb8: usbfs: process 8031 (syz.3.1356) did not claim interface 0 before use [ 113.456712][ T8051] loop4: detected capacity change from 0 to 512 [ 113.530227][ T8051] FAT-fs (loop4): Invalid FSINFO signature: 0x00000001, 0x61417272 (sector = 1) [ 113.539814][ T8031] loop3: detected capacity change from 512 to 64 [ 113.548990][ T8031] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 113.558386][ T8031] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #19: comm syz.3.1356: mark_inode_dirty error [ 113.570564][ T8031] bio_check_eod: 7 callbacks suppressed [ 113.570579][ T8031] syz.3.1356: attempt to access beyond end of device [ 113.570579][ T8031] loop3: rw=2049, sector=352, nr_sectors = 4 limit=64 [ 113.589419][ T8031] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 19 starting block 88) [ 113.600558][ T8031] Buffer I/O error on device loop3, logical block 88 [ 113.635434][ T3320] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /268/file0: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=2048 fake=0 [ 113.690558][ T3320] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 113.718808][ T3320] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz-executor: mark_inode_dirty error [ 113.723363][ T8070] loop4: detected capacity change from 0 to 512 [ 113.806611][ T8070] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 113.860979][ T8070] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 113.884906][ T8070] System zones: 1-12 [ 113.888921][ T8070] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.1367: Directory hole found for htree index block 0 [ 113.954464][ T8070] EXT4-fs (loop4): Remounting filesystem read-only [ 113.979432][ T8070] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 114.023047][ T8070] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 114.056517][ T8070] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.136473][ T8070] EXT4-fs: group quota file already specified [ 114.230470][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 114.230485][ T29] audit: type=1326 audit(1764512249.696:5002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8098 comm="syz.1.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968c98f749 code=0x7ffc0000 [ 114.261206][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.292855][ T29] audit: type=1326 audit(1764512249.726:5003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8098 comm="syz.1.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f968c98f749 code=0x7ffc0000 [ 114.316273][ T29] audit: type=1326 audit(1764512249.726:5004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8098 comm="syz.1.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968c98f749 code=0x7ffc0000 [ 114.339729][ T29] audit: type=1326 audit(1764512249.726:5005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8098 comm="syz.1.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968c98f749 code=0x7ffc0000 [ 114.405805][ T8110] loop1: detected capacity change from 0 to 512 [ 114.427076][ T8108] can: request_module (can-proto-4) failed. [ 114.456720][ T8108] netlink: 'syz.0.1377': attribute type 10 has an invalid length. [ 114.461606][ T8110] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.1378: corrupted in-inode xattr: invalid ea_ino [ 114.489898][ T8110] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1378: couldn't read orphan inode 15 (err -117) [ 114.550438][ T8110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.579224][ T29] audit: type=1400 audit(1764512249.876:5006): avc: denied { create } for pid=8111 comm="syz.4.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 114.634634][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.719175][ T3749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.803905][ T8123] v speed is unknown, defaulting to 1000 [ 114.878315][ T8123] lo speed is unknown, defaulting to 1000 [ 114.950515][ T8147] xt_hashlimit: max too large, truncated to 1048576 [ 115.090183][ T29] audit: type=1326 audit(1764512250.556:5007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8148 comm="syz.0.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64a44f749 code=0x7ffc0000 [ 115.143777][ T29] audit: type=1326 audit(1764512250.556:5008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8148 comm="syz.0.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64a44f749 code=0x7ffc0000 [ 115.167279][ T29] audit: type=1326 audit(1764512250.576:5009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8148 comm="syz.0.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7ff64a44f749 code=0x7ffc0000 [ 115.190731][ T29] audit: type=1326 audit(1764512250.576:5010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8148 comm="syz.0.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64a44f749 code=0x7ffc0000 [ 115.214149][ T29] audit: type=1326 audit(1764512250.576:5011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8148 comm="syz.0.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64a44f749 code=0x7ffc0000 [ 115.352739][ T8154] netlink: 'syz.1.1391': attribute type 10 has an invalid length. [ 115.854114][ T8165] loop1: detected capacity change from 0 to 1024 [ 115.901633][ T8164] xt_CT: You must specify a L4 protocol and not use inversions on it [ 116.106638][ T8180] v speed is unknown, defaulting to 1000 [ 116.140082][ T8180] lo speed is unknown, defaulting to 1000 [ 116.240961][ T8187] loop1: detected capacity change from 0 to 128 [ 116.269926][ T8190] loop1: detected capacity change from 0 to 256 [ 116.401728][ T8193] loop1: detected capacity change from 0 to 1024 [ 116.430034][ T8193] EXT4-fs: Ignoring removed orlov option [ 116.435742][ T8193] ext4: Unknown parameter 'fsname' [ 116.922145][ T8196] __nla_validate_parse: 5 callbacks suppressed [ 116.922160][ T8196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1406'. [ 117.274872][ T8205] loop1: detected capacity change from 0 to 512 [ 117.285287][ T8205] FAT-fs (loop1): Invalid FSINFO signature: 0x00000001, 0x61417272 (sector = 1) [ 117.613601][ T8253] : renamed from wg2 (while UP) [ 117.622264][ T8253] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1419'. [ 117.658660][ T8256] loop1: detected capacity change from 0 to 512 [ 117.669836][ T8256] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 117.681158][ T8256] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1421: bg 0: block 384: padding at end of block bitmap is not set [ 117.716705][ T8256] EXT4-fs (loop1): Remounting filesystem read-only [ 117.726801][ T8256] EXT4-fs (loop1): 1 truncate cleaned up [ 117.737259][ T8256] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.954773][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.471932][ T8263] loop1: detected capacity change from 0 to 1024 [ 118.485074][ T8263] EXT4-fs: Ignoring removed orlov option [ 118.502282][ T8263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.698420][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.030344][ T8284] syz.0.1431 (8284) used greatest stack depth: 8384 bytes left [ 119.162941][ T8297] loop1: detected capacity change from 0 to 512 [ 119.210369][ T8297] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.226765][ T8297] ext4 filesystem being mounted at /274/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.239785][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 119.239800][ T29] audit: type=1326 audit(1764512254.706:5239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8288 comm="syz.1.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f968c9865e7 code=0x7ffc0000 [ 119.305283][ T29] audit: type=1326 audit(1764512254.736:5240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8288 comm="syz.1.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f968c92b829 code=0x7ffc0000 [ 119.328763][ T29] audit: type=1326 audit(1764512254.736:5241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8288 comm="syz.1.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f968c9865e7 code=0x7ffc0000 [ 119.352148][ T29] audit: type=1326 audit(1764512254.736:5242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8288 comm="syz.1.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f968c92b829 code=0x7ffc0000 [ 119.375523][ T29] audit: type=1326 audit(1764512254.736:5243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8288 comm="syz.1.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f968c9865e7 code=0x7ffc0000 [ 119.398908][ T29] audit: type=1326 audit(1764512254.736:5244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8288 comm="syz.1.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f968c92b829 code=0x7ffc0000 [ 119.422293][ T29] audit: type=1326 audit(1764512254.736:5245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8288 comm="syz.1.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f968c9865e7 code=0x7ffc0000 [ 119.445637][ T29] audit: type=1326 audit(1764512254.736:5246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8288 comm="syz.1.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f968c92b829 code=0x7ffc0000 [ 119.468935][ T29] audit: type=1326 audit(1764512254.736:5247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8288 comm="syz.1.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f968c9865e7 code=0x7ffc0000 [ 119.492254][ T29] audit: type=1326 audit(1764512254.736:5248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8288 comm="syz.1.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f968c92b829 code=0x7ffc0000 [ 119.981894][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.100613][ T8329] tipc: Enabling of bearer rejected, already enabled [ 120.240940][ T8331] tipc: Enabling of bearer rejected, already enabled [ 120.381352][ T8338] loop1: detected capacity change from 0 to 256 [ 120.403844][ T8338] FAULT_INJECTION: forcing a failure. [ 120.403844][ T8338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.416942][ T8338] CPU: 0 UID: 0 PID: 8338 Comm: syz.1.1440 Not tainted syzkaller #0 PREEMPT(voluntary) [ 120.417027][ T8338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 120.417041][ T8338] Call Trace: [ 120.417048][ T8338] [ 120.417055][ T8338] __dump_stack+0x1d/0x30 [ 120.417073][ T8338] dump_stack_lvl+0xe8/0x140 [ 120.417089][ T8338] dump_stack+0x15/0x1b [ 120.417103][ T8338] should_fail_ex+0x265/0x280 [ 120.417158][ T8338] should_fail+0xb/0x20 [ 120.417171][ T8338] should_fail_usercopy+0x1a/0x20 [ 120.417188][ T8338] copy_folio_from_iter_atomic+0x278/0x11b0 [ 120.417217][ T8338] ? fat_write_begin+0x4f/0xe0 [ 120.417242][ T8338] ? __pfx_fat_get_block+0x10/0x10 [ 120.417306][ T8338] generic_perform_write+0x2c2/0x490 [ 120.417331][ T8338] __generic_file_write_iter+0x9e/0x120 [ 120.417353][ T8338] generic_file_write_iter+0x8d/0x2f0 [ 120.417375][ T8338] ? css_rstat_updated+0xb7/0x240 [ 120.417422][ T8338] ? count_memcg_events+0x167/0x230 [ 120.417446][ T8338] ? __rcu_read_unlock+0x4f/0x70 [ 120.417467][ T8338] ? handle_mm_fault+0x2266/0x2be0 [ 120.417487][ T8338] ? avc_policy_seqno+0x15/0x30 [ 120.417547][ T8338] ? selinux_file_permission+0x1e4/0x320 [ 120.417649][ T8338] ? security_file_permission+0x22/0x80 [ 120.417677][ T8338] aio_write+0x2e5/0x410 [ 120.417710][ T8338] io_submit_one+0xacd/0x11d0 [ 120.417831][ T8338] __se_sys_io_submit+0xfb/0x280 [ 120.417861][ T8338] __x64_sys_io_submit+0x43/0x50 [ 120.417888][ T8338] x64_sys_call+0x2d6c/0x3000 [ 120.417910][ T8338] do_syscall_64+0xd2/0x200 [ 120.417931][ T8338] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 120.417970][ T8338] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 120.418074][ T8338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.418103][ T8338] RIP: 0033:0x7f968c98f749 [ 120.418116][ T8338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.418136][ T8338] RSP: 002b:00007f968b3ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 120.418164][ T8338] RAX: ffffffffffffffda RBX: 00007f968cbe5fa0 RCX: 00007f968c98f749 [ 120.418178][ T8338] RDX: 0000200000000540 RSI: 000000000000003b RDI: 00007f968b3c6000 [ 120.418191][ T8338] RBP: 00007f968b3ef090 R08: 0000000000000000 R09: 0000000000000000 [ 120.418204][ T8338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.418217][ T8338] R13: 00007f968cbe6038 R14: 00007f968cbe5fa0 R15: 00007ffd67f65d48 [ 120.418291][ T8338] [ 120.790090][ T8354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1444'. [ 120.814805][ T8356] loop1: detected capacity change from 0 to 512 [ 120.834708][ T8356] FAT-fs (loop1): Invalid FSINFO signature: 0x00000001, 0x61417272 (sector = 1) [ 121.028663][ T8374] tipc: Enabling of bearer rejected, already enabled [ 121.115350][ T8388] loop1: detected capacity change from 0 to 512 [ 121.140521][ T8388] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.1449: corrupted in-inode xattr: invalid ea_ino [ 121.160453][ T8388] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1449: couldn't read orphan inode 15 (err -117) [ 121.180674][ T8388] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.199514][ T8388] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1449'. [ 121.244196][ T8397] can: request_module (can-proto-4) failed. [ 121.285999][ T8397] netlink: 'syz.1.1450': attribute type 10 has an invalid length. [ 121.294497][ T8397] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1450'. [ 121.598166][ T8415] loop1: detected capacity change from 0 to 512 [ 121.647112][ T8415] FAT-fs (loop1): Invalid FSINFO signature: 0x00000001, 0x61417272 (sector = 1) [ 121.677952][ T8426] cgroup2: Unknown parameter 'nids_localevents' [ 121.741233][ T8435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1462'. [ 121.780034][ T8439] can: request_module (can-proto-4) failed. [ 121.822826][ T8439] netlink: 'syz.0.1463': attribute type 10 has an invalid length. [ 121.831042][ T8439] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1463'. [ 121.874177][ T8449] xt_hashlimit: max too large, truncated to 1048576 [ 122.187889][ T8476] loop1: detected capacity change from 0 to 512 [ 122.195656][ T8476] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 122.210086][ T8476] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 122.218253][ T8476] System zones: 1-12 [ 122.222409][ T8476] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.1471: Directory hole found for htree index block 0 [ 122.235299][ T8476] EXT4-fs (loop1): Remounting filesystem read-only [ 122.241817][ T8476] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 122.250067][ T8476] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 122.262733][ T8476] EXT4-fs: group quota file already specified [ 122.271328][ T8476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1471'. [ 122.346504][ T8479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1472'. [ 122.359947][ T8479] team0 (unregistering): Port device team_slave_0 removed [ 122.368718][ T8479] team0 (unregistering): Port device team_slave_1 removed [ 122.376596][ T8479] team0 (unregistering): Port device geneve1 removed [ 122.384971][ T8479] team0 (unregistering): Port device dummy0 removed [ 122.399593][ T8480] pim6reg: entered allmulticast mode [ 122.501693][ T8478] pim6reg: left allmulticast mode [ 122.586727][ T8490] xt_hashlimit: max too large, truncated to 1048576 [ 122.628613][ T8495] ip6gre0: Caught tx_queue_len zero misconfig [ 122.634896][ T8495] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 122.818184][ T8504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1481'. [ 123.207133][ T8521] loop1: detected capacity change from 0 to 1024 [ 123.217464][ T8521] EXT4-fs: Ignoring removed orlov option [ 123.223922][ T8521] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 123.250010][ T8521] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 123.262455][ T8521] EXT4-fs (loop1): This should not happen!! Data will be lost [ 123.262455][ T8521] [ 123.272089][ T8521] EXT4-fs (loop1): Total free blocks count 0 [ 123.278061][ T8521] EXT4-fs (loop1): Free/Dirty block details [ 123.283955][ T8521] EXT4-fs (loop1): free_blocks=0 [ 123.288883][ T8521] EXT4-fs (loop1): dirty_blocks=0 [ 123.293982][ T8521] EXT4-fs (loop1): Block reservation details [ 123.299992][ T8521] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 123.372711][ T8525] v speed is unknown, defaulting to 1000 [ 123.404481][ T8525] lo speed is unknown, defaulting to 1000 [ 123.499127][ T8530] loop1: detected capacity change from 0 to 1024 [ 123.506292][ T8530] EXT4-fs: Ignoring removed orlov option [ 123.513129][ T8530] ext4: Unknown parameter 'fsname' [ 123.741160][ T8542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1495'. [ 124.110136][ T8547] netlink: 'syz.0.1497': attribute type 10 has an invalid length. [ 124.120573][ T8547] team0: Port device dummy0 removed [ 124.127829][ T8547] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 124.190582][ T8549] tipc: Enabling of bearer rejected, already enabled [ 124.310839][ T8557] can: request_module (can-proto-4) failed. [ 124.348083][ T8557] netlink: 'syz.0.1502': attribute type 10 has an invalid length. [ 124.356213][ T8557] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1502'. [ 124.425239][ T8569] netlink: 'syz.1.1507': attribute type 12 has an invalid length. [ 124.500832][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 124.500845][ T29] audit: type=1326 audit(1764512259.966:5385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8570 comm="syz.0.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64a44f749 code=0x7ffc0000 [ 124.549807][ T29] audit: type=1326 audit(1764512259.996:5386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8570 comm="syz.0.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7ff64a44f749 code=0x7ffc0000 [ 124.573215][ T29] audit: type=1326 audit(1764512259.996:5387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8570 comm="syz.0.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64a44f749 code=0x7ffc0000 [ 124.596627][ T29] audit: type=1326 audit(1764512259.996:5388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8570 comm="syz.0.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64a44f749 code=0x7ffc0000 [ 124.620392][ T29] audit: type=1326 audit(1764512259.996:5389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8570 comm="syz.0.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff64a44df90 code=0x7ffc0000 [ 124.643788][ T29] audit: type=1326 audit(1764512259.996:5390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8570 comm="syz.0.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64a44f749 code=0x7ffc0000 [ 124.667198][ T29] audit: type=1326 audit(1764512259.996:5391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8570 comm="syz.0.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64a44f749 code=0x7ffc0000 [ 124.690591][ T29] audit: type=1326 audit(1764512259.996:5392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8570 comm="syz.0.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff64a44f749 code=0x7ffc0000 [ 124.714002][ T29] audit: type=1326 audit(1764512259.996:5393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8570 comm="syz.0.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64a44f749 code=0x7ffc0000 [ 124.737394][ T29] audit: type=1326 audit(1764512259.996:5394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8570 comm="syz.0.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7ff64a44f749 code=0x7ffc0000 [ 125.042138][ T8581] tipc: Enabling of bearer rejected, already enabled [ 125.286648][ T8600] loop1: detected capacity change from 0 to 8192 [ 125.391847][ T8604] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 125.480317][ T8611] v speed is unknown, defaulting to 1000 [ 125.513067][ T8611] lo speed is unknown, defaulting to 1000 [ 125.656961][ T8621] syzkaller1: entered promiscuous mode [ 125.662484][ T8621] syzkaller1: entered allmulticast mode [ 125.721846][ T8621] 9pnet_fd: Insufficient options for proto=fd [ 125.915622][ T8632] loop1: detected capacity change from 0 to 512 [ 125.937765][ T8632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1528'. [ 125.946706][ T8632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1528'. [ 126.206057][ T8637] loop1: detected capacity change from 0 to 8192 [ 126.239341][ T3316] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 126.247204][ T3316] FAT-fs (loop1): Filesystem has been set read-only [ 126.283542][ T8639] ip6gre0: Caught tx_queue_len zero misconfig [ 126.289671][ T8639] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 126.326009][ T8641] loop1: detected capacity change from 0 to 512 [ 126.335894][ T8641] FAT-fs (loop1): Invalid FSINFO signature: 0x00000001, 0x61417272 (sector = 1) [ 126.515935][ T6492] Bluetooth: hci0: Frame reassembly failed (-84) [ 127.293679][ T8682] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 127.305820][ T8682] bond1 (unregistering): Released all slaves [ 128.301654][ T8700] netlink: 'syz.0.1544': attribute type 3 has an invalid length. [ 128.309459][ T8700] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1544'. [ 128.589791][ T8673] Bluetooth: hci0: command 0x1003 tx timeout [ 128.595839][ T3673] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 129.243633][ T8704] v speed is unknown, defaulting to 1000 [ 129.306008][ T8704] lo speed is unknown, defaulting to 1000 [ 129.440793][ T8704] chnl_net:caif_netlink_parms(): no params data found [ 129.511420][ T8704] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.518654][ T8704] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.527830][ T8704] bridge_slave_0: entered allmulticast mode [ 129.534332][ T8704] bridge_slave_0: entered promiscuous mode [ 129.541156][ T8704] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.548232][ T8704] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.555473][ T8704] bridge_slave_1: entered allmulticast mode [ 129.561946][ T8704] bridge_slave_1: entered promiscuous mode [ 129.579643][ T8704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.592052][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 129.592063][ T29] audit: type=1326 audit(1764512265.056:5493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8720 comm="syz.0.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64a44f749 code=0x7ffc0000 [ 129.621526][ T29] audit: type=1326 audit(1764512265.056:5494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8720 comm="syz.0.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7ff64a44f749 code=0x7ffc0000 [ 129.644888][ T29] audit: type=1326 audit(1764512265.056:5495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8720 comm="syz.0.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64a44f749 code=0x7ffc0000 [ 129.668320][ T29] audit: type=1326 audit(1764512265.056:5496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8720 comm="syz.0.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff64a44df90 code=0x7ffc0000 [ 129.691755][ T29] audit: type=1326 audit(1764512265.056:5497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8720 comm="syz.0.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64a44f749 code=0x7ffc0000 [ 129.715143][ T29] audit: type=1326 audit(1764512265.056:5498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8720 comm="syz.0.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff64a44f749 code=0x7ffc0000 [ 129.738521][ T29] audit: type=1326 audit(1764512265.056:5499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8720 comm="syz.0.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64a44f749 code=0x7ffc0000 [ 129.761924][ T29] audit: type=1326 audit(1764512265.056:5500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8720 comm="syz.0.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7ff64a44f749 code=0x7ffc0000 [ 129.771177][ T8704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.785237][ T29] audit: type=1326 audit(1764512265.056:5501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8720 comm="syz.0.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64a44f749 code=0x7ffc0000 [ 129.817718][ T29] audit: type=1326 audit(1764512265.056:5502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8720 comm="syz.0.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff64a44f749 code=0x7ffc0000 [ 129.868660][ T8704] team0: Port device team_slave_0 added [ 129.886492][ T8704] team0: Port device team_slave_1 added [ 129.951687][ T8704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.958668][ T8704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.984561][ T8704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.023386][ T8729] tipc: Enabling of bearer rejected, already enabled [ 130.031411][ T8704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.038380][ T8704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.064446][ T8704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.126845][ T8704] hsr_slave_0: entered promiscuous mode [ 130.140088][ T8704] hsr_slave_1: entered promiscuous mode [ 130.146021][ T8704] debugfs: 'hsr0' already exists in 'hsr' [ 130.148040][ T8738] loop1: detected capacity change from 0 to 512 [ 130.151758][ T8704] Cannot create hsr debugfs directory [ 130.221555][ T8738] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 130.252372][ T8738] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 130.272955][ T8738] System zones: 1-12 [ 130.300455][ T8738] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.1551: Directory hole found for htree index block 0 [ 130.342683][ T8738] EXT4-fs (loop1): Remounting filesystem read-only [ 130.378656][ T8727] v speed is unknown, defaulting to 1000 [ 130.385336][ T8704] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 130.393221][ T8738] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 130.411607][ T8738] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 130.430235][ T8738] EXT4-fs mount: 5 callbacks suppressed [ 130.430249][ T8738] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.459316][ T8704] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 130.471977][ T8738] EXT4-fs: group quota file already specified [ 130.478706][ T8751] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1552'. [ 130.487845][ T8731] v speed is unknown, defaulting to 1000 [ 130.494070][ T8727] lo speed is unknown, defaulting to 1000 [ 130.499944][ T8704] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 130.535933][ T8704] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 130.582761][ T8731] lo speed is unknown, defaulting to 1000 [ 130.598423][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.640850][ T8769] netlink: 'syz.1.1556': attribute type 3 has an invalid length. [ 130.648616][ T8769] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1556'. [ 130.675797][ T8771] Cannot find set identified by id 0 to match [ 130.679611][ T8704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.714464][ T8769] loop1: detected capacity change from 0 to 512 [ 130.736191][ T8704] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.753032][ T8769] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 130.762410][ T8775] xt_hashlimit: max too large, truncated to 1048576 [ 130.790252][ T8769] EXT4-fs (loop1): invalid journal inode [ 130.792879][ T8727] chnl_net:caif_netlink_parms(): no params data found [ 130.802353][ T8769] EXT4-fs (loop1): can't get journal size [ 130.810654][ T8769] EXT4-fs (loop1): 1 truncate cleaned up [ 130.816830][ T8769] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.839879][ T8310] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.846970][ T8310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.859007][ T8310] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.866148][ T8310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.018151][ T8727] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.025258][ T8727] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.032914][ T8727] bridge_slave_0: entered allmulticast mode [ 131.039390][ T8727] bridge_slave_0: entered promiscuous mode [ 131.046241][ T8727] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.053476][ T8727] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.060744][ T8727] bridge_slave_1: entered allmulticast mode [ 131.067300][ T8727] bridge_slave_1: entered promiscuous mode [ 131.147195][ T8731] chnl_net:caif_netlink_parms(): no params data found [ 131.170622][ T8727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.207046][ T8727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.221298][ T8704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.259055][ T8731] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.266129][ T8731] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.273384][ T8731] bridge_slave_0: entered allmulticast mode [ 131.279953][ T8731] bridge_slave_0: entered promiscuous mode [ 131.286801][ T8731] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.293871][ T8731] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.301291][ T8731] bridge_slave_1: entered allmulticast mode [ 131.307745][ T8731] bridge_slave_1: entered promiscuous mode [ 131.328604][ T8731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.344598][ T8731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.375275][ T8731] team0: Port device team_slave_0 added [ 131.382219][ T8731] team0: Port device team_slave_1 added [ 131.398807][ T8731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.405846][ T8731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.431875][ T8731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.526812][ T8731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.533785][ T8731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.559715][ T8731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.641242][ T8727] team0: Port device team_slave_0 added [ 131.647767][ T8727] team0: Port device team_slave_1 added [ 131.687114][ T8731] hsr_slave_0: entered promiscuous mode [ 131.693219][ T8731] hsr_slave_1: entered promiscuous mode [ 131.699169][ T8731] debugfs: 'hsr0' already exists in 'hsr' [ 131.704920][ T8731] Cannot create hsr debugfs directory [ 131.740330][ T8727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.747275][ T8727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.773254][ T8727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.793960][ T8806] 9pnet: Could not find request transport: rdma [ 131.801816][ T8727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.808763][ T8727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.834777][ T8727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.893411][ T8704] veth0_vlan: entered promiscuous mode [ 131.912526][ T8727] hsr_slave_0: entered promiscuous mode [ 131.918850][ T8727] hsr_slave_1: entered promiscuous mode [ 131.929095][ T8727] debugfs: 'hsr0' already exists in 'hsr' [ 131.934847][ T8727] Cannot create hsr debugfs directory [ 131.941247][ T8704] veth1_vlan: entered promiscuous mode [ 131.987903][ T8704] veth0_macvtap: entered promiscuous mode [ 132.021567][ T8704] veth1_macvtap: entered promiscuous mode [ 132.046779][ T8704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.088774][ T8704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.126501][ T8731] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 132.141832][ T8310] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.157812][ T8310] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.166655][ T8731] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 132.192744][ T8731] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 132.213355][ T8310] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.223788][ T8731] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 132.247675][ T8310] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.293940][ T8727] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 132.310702][ T8727] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 132.341486][ T8727] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 132.371984][ T8727] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 132.497180][ T8731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.536901][ T8731] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.268487][ T8731] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 133.278891][ T8731] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 133.293121][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.340653][ T8839] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1565'. [ 133.360519][ T6497] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.367584][ T6497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.392607][ T6497] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.399803][ T6497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.417721][ T8845] xt_hashlimit: max too large, truncated to 1048576 [ 133.448821][ T8845] loop1: detected capacity change from 0 to 512 [ 133.494269][ T8845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 133.516327][ T8845] ext4 filesystem being mounted at /334/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.544102][ T8731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.570455][ T8845] usb usb8: check_ctrlrecip: process 8845 (syz.1.1566) requesting ep 01 but needs 81 [ 133.580007][ T8845] usb usb8: usbfs: process 8845 (syz.1.1566) did not claim interface 0 before use [ 133.631545][ T8727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.648405][ T8727] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.665381][ T8313] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.672473][ T8313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.684836][ T8310] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.691900][ T8310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.700806][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 133.898602][ T8731] veth0_vlan: entered promiscuous mode [ 133.914004][ T8727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.923779][ T8731] veth1_vlan: entered promiscuous mode [ 133.954237][ T8731] veth0_macvtap: entered promiscuous mode [ 133.981236][ T8884] atomic_op ffff888114629d28 conn xmit_atomic 0000000000000000 [ 133.984285][ T8731] veth1_macvtap: entered promiscuous mode [ 134.015582][ T8731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.034317][ T8731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.062548][ T6515] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.073061][ T6515] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.102234][ T6515] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.140003][ T6515] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.166292][ T8727] veth0_vlan: entered promiscuous mode [ 134.188704][ T8727] veth1_vlan: entered promiscuous mode [ 134.209609][ T8727] veth0_macvtap: entered promiscuous mode [ 134.217220][ T8727] veth1_macvtap: entered promiscuous mode [ 134.229457][ T8727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.242577][ T8727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.254063][ T8310] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.264612][ T8310] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.275529][ T8310] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.297420][ T8310] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.322068][ T8884] v speed is unknown, defaulting to 1000 [ 134.411466][ T8905] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1573'. [ 134.412062][ T8884] lo speed is unknown, defaulting to 1000 [ 134.432706][ T8907] loop7: detected capacity change from 0 to 512 [ 134.483595][ T8907] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 134.536708][ T8912] netlink: 'syz.1.1575': attribute type 10 has an invalid length. [ 134.546185][ T8912] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1575'. [ 134.562574][ T8912] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 134.597148][ T8907] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 134.607509][ T8907] System zones: 1-12 [ 134.661971][ T8907] EXT4-fs error (device loop7): dx_probe:791: inode #2: comm syz.7.1574: Directory hole found for htree index block 0 [ 134.678337][ T8916] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1577'. [ 134.687321][ T8916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1577'. [ 134.707188][ T8907] EXT4-fs (loop7): Remounting filesystem read-only [ 134.755798][ T8922] FAULT_INJECTION: forcing a failure. [ 134.755798][ T8922] name failslab, interval 1, probability 0, space 0, times 0 [ 134.768425][ T8922] CPU: 1 UID: 0 PID: 8922 Comm: syz.8.1579 Not tainted syzkaller #0 PREEMPT(voluntary) [ 134.768447][ T8922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 134.768566][ T8922] Call Trace: [ 134.768573][ T8922] [ 134.768580][ T8922] __dump_stack+0x1d/0x30 [ 134.768602][ T8922] dump_stack_lvl+0xe8/0x140 [ 134.768645][ T8922] dump_stack+0x15/0x1b [ 134.768658][ T8922] should_fail_ex+0x265/0x280 [ 134.768733][ T8922] should_failslab+0x8c/0xb0 [ 134.768759][ T8922] kmem_cache_alloc_noprof+0x50/0x480 [ 134.768781][ T8922] ? skb_clone+0x151/0x1f0 [ 134.768866][ T8922] ? __genradix_ptr+0xe6/0x110 [ 134.768932][ T8922] skb_clone+0x151/0x1f0 [ 134.768951][ T8922] sctp_ulpevent_make_rcvmsg+0x1cb/0x410 [ 134.768998][ T8922] sctp_ulpq_tail_data+0x5a/0x610 [ 134.769136][ T8922] ? sctp_sf_eat_data_6_2+0x5c3/0x620 [ 134.769203][ T8922] ? __pfx_sctp_ulpq_tail_data+0x10/0x10 [ 134.769290][ T8922] sctp_do_sm+0x129c/0x3230 [ 134.769337][ T8922] sctp_assoc_bh_rcv+0x2a8/0x420 [ 134.769369][ T8922] sctp_inq_push+0x103/0x110 [ 134.769395][ T8922] sctp_backlog_rcv+0xed/0x4d0 [ 134.769494][ T8922] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 134.769520][ T8922] sk_backlog_rcv+0x87/0x190 [ 134.769543][ T8922] __release_sock+0xc5/0x160 [ 134.769617][ T8922] release_sock+0x44/0x150 [ 134.769694][ T8922] ? __pfx_sctp_shutdown+0x10/0x10 [ 134.769714][ T8922] inet_shutdown+0x1f4/0x210 [ 134.769736][ T8922] __x64_sys_shutdown+0xd6/0x130 [ 134.769760][ T8922] x64_sys_call+0xd97/0x3000 [ 134.769895][ T8922] do_syscall_64+0xd2/0x200 [ 134.769912][ T8922] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 134.769987][ T8922] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 134.770016][ T8922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.770038][ T8922] RIP: 0033:0x7f31064ff749 [ 134.770053][ T8922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.770131][ T8922] RSP: 002b:00007f3104f5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 134.770151][ T8922] RAX: ffffffffffffffda RBX: 00007f3106755fa0 RCX: 00007f31064ff749 [ 134.770165][ T8922] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000004 [ 134.770236][ T8922] RBP: 00007f3104f5f090 R08: 0000000000000000 R09: 0000000000000000 [ 134.770248][ T8922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.770261][ T8922] R13: 00007f3106756038 R14: 00007f3106755fa0 R15: 00007ffc8ecd5be8 [ 134.770282][ T8922] [ 134.798258][ T8923] loop1: detected capacity change from 0 to 512 [ 134.905050][ T8907] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -117 [ 135.003771][ T8919] xt_hashlimit: max too large, truncated to 1048576 [ 135.011797][ T8907] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 135.064753][ T8923] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.1580: corrupted in-inode xattr: invalid ea_ino [ 135.072141][ T8926] loop8: detected capacity change from 0 to 512 [ 135.079387][ T8907] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.098499][ T8926] FAT-fs (loop8): Invalid FSINFO signature: 0x00000001, 0x61417272 (sector = 1) [ 135.147625][ T8923] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1580: couldn't read orphan inode 15 (err -117) [ 135.183001][ T8907] EXT4-fs: group quota file already specified [ 135.192465][ T8923] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.237810][ T8921] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1580'. [ 135.261818][ T8931] tipc: Enabling of bearer rejected, already enabled [ 135.269954][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.280502][ T8727] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.401554][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 135.401569][ T29] audit: type=1326 audit(1764512270.866:5570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.0.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64a44f749 code=0x7ffc0000 [ 135.479168][ T8953] xt_hashlimit: max too large, truncated to 1048576 [ 135.481383][ T29] audit: type=1326 audit(1764512270.896:5571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.0.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff64a44f749 code=0x7ffc0000 [ 135.491120][ T8953] loop1: detected capacity change from 0 to 512 [ 135.509382][ T29] audit: type=1326 audit(1764512270.896:5572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.0.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64a44f749 code=0x7ffc0000 [ 135.539016][ T29] audit: type=1326 audit(1764512270.896:5573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.0.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff64a44f749 code=0x7ffc0000 [ 135.562416][ T29] audit: type=1326 audit(1764512270.896:5574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.0.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64a44f749 code=0x7ffc0000 [ 135.585918][ T29] audit: type=1326 audit(1764512270.896:5575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.0.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff64a44f749 code=0x7ffc0000 [ 135.609492][ T29] audit: type=1326 audit(1764512270.896:5576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.0.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64a44f749 code=0x7ffc0000 [ 135.632950][ T29] audit: type=1326 audit(1764512270.896:5577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.0.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7ff64a44f749 code=0x7ffc0000 [ 135.656324][ T29] audit: type=1326 audit(1764512270.896:5578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.0.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64a44f749 code=0x7ffc0000 [ 135.679755][ T29] audit: type=1326 audit(1764512270.916:5579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8946 comm="syz.7.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0697f749 code=0x7ffc0000 [ 135.704756][ T8953] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 135.724288][ T8953] ext4 filesystem being mounted at /343/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.810315][ T8953] usb usb8: check_ctrlrecip: process 8953 (syz.1.1592) requesting ep 01 but needs 81 [ 135.819864][ T8953] usb usb8: usbfs: process 8953 (syz.1.1592) did not claim interface 0 before use [ 135.868018][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 136.085278][ T8967] loop1: detected capacity change from 0 to 512 [ 136.114186][ T8967] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.1595: corrupted in-inode xattr: invalid ea_ino [ 136.140121][ T8967] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1595: couldn't read orphan inode 15 (err -117) [ 136.193372][ T8967] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.243229][ T8967] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1595'. [ 136.305089][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.654753][ T8988] loop1: detected capacity change from 0 to 1024 [ 136.666573][ T8988] EXT4-fs: Ignoring removed orlov option [ 136.709956][ T8988] ext4: Unknown parameter 'fsname' [ 136.789358][ T8999] loop6: detected capacity change from 0 to 512 [ 136.821201][ T8999] FAT-fs (loop6): Invalid FSINFO signature: 0x00000001, 0x61417272 (sector = 1) [ 137.003488][ T9019] loop6: detected capacity change from 0 to 512 [ 137.036115][ T9019] EXT4-fs error (device loop6): ext4_iget_extra_inode:5075: inode #15: comm syz.6.1610: corrupted in-inode xattr: invalid ea_ino [ 137.050208][ T9019] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1610: couldn't read orphan inode 15 (err -117) [ 137.107041][ T9019] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.152495][ T9026] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.182207][ T9019] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1610'. [ 137.201093][ T8704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.577824][ T9053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1615'. [ 137.664677][ T9055] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1616'. [ 137.809573][ T9064] bridge0: port 3(vlan2) entered blocking state [ 137.816007][ T9064] bridge0: port 3(vlan2) entered disabled state [ 137.850023][ T9064] vlan2: entered allmulticast mode [ 137.855192][ T9064] bridge0: entered allmulticast mode [ 137.870376][ T9064] vlan2: left allmulticast mode [ 137.875285][ T9064] bridge0: left allmulticast mode [ 137.919960][ T9066] loop1: detected capacity change from 0 to 512 [ 137.948938][ T9069] netlink: 'syz.8.1621': attribute type 10 has an invalid length. [ 137.961641][ T9069] team0: Port device geneve1 added [ 137.968897][ T9066] FAT-fs (loop1): Invalid FSINFO signature: 0x00000001, 0x61417272 (sector = 1) [ 138.053336][ T9077] syzkaller1: entered promiscuous mode [ 138.058873][ T9077] syzkaller1: entered allmulticast mode [ 138.113609][ T9087] loop8: detected capacity change from 0 to 512 [ 138.161843][ T9087] EXT4-fs (loop8): warning: checktime reached, running e2fsck is recommended [ 138.193085][ T9087] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 138.221358][ T9087] System zones: 1-12 [ 138.225388][ T9087] EXT4-fs error (device loop8): dx_probe:791: inode #2: comm syz.8.1625: Directory hole found for htree index block 0 [ 138.311047][ T9087] EXT4-fs (loop8): Remounting filesystem read-only [ 138.341244][ T9087] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -117 [ 138.353244][ T9109] __nla_validate_parse: 5 callbacks suppressed [ 138.353259][ T9109] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1630'. [ 138.389922][ T9087] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 138.398593][ T9087] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.461969][ T9120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.470624][ T9120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.490147][ T9087] EXT4-fs: group quota file already specified [ 138.504090][ T9123] xt_hashlimit: max too large, truncated to 1048576 [ 138.581272][ T8731] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.601512][ T9125] netlink: 'syz.0.1634': attribute type 10 has an invalid length. [ 138.609350][ T9125] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1634'. [ 138.654104][ T9127] loop8: detected capacity change from 0 to 512 [ 138.700209][ T9127] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.1635: inode has both inline data and extents flags [ 138.719756][ T9127] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.1635: couldn't read orphan inode 15 (err -117) [ 138.738630][ T9127] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.865502][ T8731] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.931041][ T9149] loop8: detected capacity change from 0 to 128 [ 138.958446][ T9152] xt_hashlimit: max too large, truncated to 1048576 [ 139.038308][ T9154] loop1: detected capacity change from 0 to 512 [ 139.049040][ T9154] FAT-fs (loop1): Invalid FSINFO signature: 0x00000001, 0x61417272 (sector = 1) [ 139.170281][ T9171] syzkaller1: entered promiscuous mode [ 139.175817][ T9171] syzkaller1: entered allmulticast mode [ 139.295198][ T9190] loop6: detected capacity change from 0 to 512 [ 139.317690][ T9190] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 139.336863][ T9196] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1659'. [ 139.350604][ T9190] EXT4-fs (loop6): invalid journal inode [ 139.357025][ T9194] loop7: detected capacity change from 0 to 128 [ 139.365594][ T9190] EXT4-fs (loop6): can't get journal size [ 139.400155][ T9190] EXT4-fs (loop6): 1 truncate cleaned up [ 139.417556][ T9190] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.452245][ T9209] loop7: detected capacity change from 0 to 512 [ 139.522742][ T9209] EXT4-fs error (device loop7): ext4_iget_extra_inode:5075: inode #15: comm syz.7.1663: corrupted in-inode xattr: invalid ea_ino [ 139.544879][ T9209] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1663: couldn't read orphan inode 15 (err -117) [ 139.574844][ T9209] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.617035][ T9209] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1663'. [ 139.704317][ T8727] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.921815][ T9248] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1673'. [ 140.118794][ T9261] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9261 comm=+) [ 140.180057][ T9267] syzkaller1: entered promiscuous mode [ 140.185616][ T9267] syzkaller1: entered allmulticast mode [ 140.302907][ T9276] netlink: 'syz.0.1684': attribute type 10 has an invalid length. [ 140.310763][ T9276] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1684'. [ 140.467852][ T9284] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1688'. [ 140.705398][ T9301] 9pnet_fd: Insufficient options for proto=fd [ 140.715017][ T9301] tipc: Enabling of bearer rejected, already enabled [ 140.808370][ T9310] loop1: detected capacity change from 0 to 128 [ 140.873616][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 140.873632][ T29] audit: type=1326 audit(1764512284.336:5817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9311 comm="syz.1.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968c98f749 code=0x7ffc0000 [ 140.941938][ T29] audit: type=1326 audit(1764512284.366:5818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9311 comm="syz.1.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968c98f749 code=0x7ffc0000 [ 140.965366][ T29] audit: type=1326 audit(1764512284.366:5819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9311 comm="syz.1.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f968c98f749 code=0x7ffc0000 [ 140.988808][ T29] audit: type=1326 audit(1764512284.366:5820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9311 comm="syz.1.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968c98f749 code=0x7ffc0000 [ 141.012197][ T29] audit: type=1326 audit(1764512284.366:5821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9311 comm="syz.1.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968c98f749 code=0x7ffc0000 [ 141.035596][ T29] audit: type=1326 audit(1764512284.366:5822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9311 comm="syz.1.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f968c98f749 code=0x7ffc0000 [ 141.058896][ T29] audit: type=1326 audit(1764512284.366:5823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9311 comm="syz.1.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968c98f749 code=0x7ffc0000 [ 141.082504][ T29] audit: type=1326 audit(1764512284.366:5824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9311 comm="syz.1.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f968c98f749 code=0x7ffc0000 [ 141.105860][ T29] audit: type=1326 audit(1764512284.366:5825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9311 comm="syz.1.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968c98f749 code=0x7ffc0000 [ 141.129233][ T29] audit: type=1326 audit(1764512284.366:5826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9311 comm="syz.1.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f968c98f749 code=0x7ffc0000 [ 141.156139][ T9305] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1696'. [ 141.198347][ T9305] IPv6: NLM_F_REPLACE set, but no existing node found! [ 141.477758][ T8704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.613072][ T9335] loop6: detected capacity change from 0 to 128 [ 141.691605][ T9342] xt_hashlimit: max too large, truncated to 1048576 [ 141.719574][ T9345] loop6: detected capacity change from 0 to 1024 [ 141.732371][ T9342] loop1: detected capacity change from 0 to 512 [ 141.739090][ T9345] EXT4-fs: Ignoring removed orlov option [ 141.746585][ T9345] ext4: Unknown parameter 'fsname' [ 141.768142][ T9342] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 141.792813][ T9342] ext4 filesystem being mounted at /377/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.833646][ T9353] netlink: 'syz.6.1714': attribute type 10 has an invalid length. [ 141.841592][ T9353] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1714'. [ 141.850414][ T9342] usb usb8: check_ctrlrecip: process 9342 (syz.1.1710) requesting ep 01 but needs 81 [ 141.860037][ T9342] usb usb8: usbfs: process 9342 (syz.1.1710) did not claim interface 0 before use [ 141.883274][ T9353] team0: Port device geneve1 added [ 141.929801][ T9342] loop1: detected capacity change from 512 to 64 [ 141.936641][ T9342] EXT4-fs error (device loop1): ext4_write_dquot:6925: comm syz.1.1710: Failed to commit dquot type 1 [ 141.948839][ T9342] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Out of memory [ 141.958024][ T9342] EXT4-fs error (device loop1): ext4_ext_truncate:4475: inode #19: comm syz.1.1710: mark_inode_dirty error [ 141.969603][ T9342] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Out of memory [ 141.978932][ T9342] EXT4-fs error (device loop1): ext4_truncate:4637: inode #19: comm syz.1.1710: mark_inode_dirty error [ 142.000473][ T3316] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /377/file0: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=2048 fake=0 [ 142.069996][ T3316] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Out of memory [ 142.107486][ T3316] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz-executor: mark_inode_dirty error [ 142.160410][ T9363] tipc: Started in network mode [ 142.165758][ T9363] tipc: Node identity ac14140f, cluster identity 4711 [ 142.179705][ T9182] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 142.179863][ T9363] tipc: New replicast peer: 255.255.255.255 [ 142.194982][ T9363] tipc: Enabled bearer , priority 10 [ 142.328810][ T9371] loop6: detected capacity change from 0 to 2048 [ 142.361183][ T9371] loop6: p1 < > p4 [ 142.365884][ T9371] loop6: p4 size 8388608 extends beyond EOD, truncated [ 142.374170][ T8311] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.441687][ T8311] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.535045][ T8311] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.638303][ T8311] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.665708][ T9383] loop8: detected capacity change from 0 to 1024 [ 142.682792][ T9383] EXT4-fs: Ignoring removed orlov option [ 142.703022][ T9383] ext4: Unknown parameter 'fsname' [ 142.770601][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 142.798452][ T9389] loop7: detected capacity change from 0 to 512 [ 142.806403][ T9389] EXT4-fs error (device loop7): ext4_iget_extra_inode:5075: inode #15: comm syz.7.1722: corrupted in-inode xattr: invalid ea_ino [ 142.838524][ T9389] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1722: couldn't read orphan inode 15 (err -117) [ 142.850653][ T8311] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.860583][ T9389] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.891538][ T8311] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.908405][ T8311] .` (unregistering): Released all slaves [ 142.916806][ T9389] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1722'. [ 142.933219][ T9374] v speed is unknown, defaulting to 1000 [ 142.939562][ T9396] syzkaller1: entered promiscuous mode [ 142.945051][ T9396] syzkaller1: entered allmulticast mode [ 142.992662][ T8727] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.009118][ T9374] lo speed is unknown, defaulting to 1000 [ 143.095632][ T6497] smc: removing ib device syz2 [ 143.118869][ T9418] loop7: detected capacity change from 0 to 128 [ 143.211389][ T23] tipc: Node number set to 2886997007 [ 143.273088][ T9417] loop6: detected capacity change from 0 to 128 [ 143.348390][ T9374] chnl_net:caif_netlink_parms(): no params data found [ 143.596761][ T9473] loop7: detected capacity change from 0 to 128 [ 143.603893][ T9374] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.611318][ T9374] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.639985][ T9374] bridge_slave_0: entered allmulticast mode [ 143.650438][ T9374] bridge_slave_0: entered promiscuous mode [ 143.691737][ T9483] loop9: detected capacity change from 0 to 7 [ 143.694204][ T9374] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.704973][ T9374] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.720709][ T9374] bridge_slave_1: entered allmulticast mode [ 143.727665][ T9374] bridge_slave_1: entered promiscuous mode [ 143.733862][ T9480] tipc: Enabling of bearer rejected, already enabled [ 143.741730][ T9477] syzkaller1: entered promiscuous mode [ 143.747192][ T9477] syzkaller1: entered allmulticast mode [ 143.752169][ T3305] Buffer I/O error on dev loop9, logical block 0, async page read [ 143.779472][ T3305] Buffer I/O error on dev loop9, logical block 0, async page read [ 143.787310][ T3305] loop9: unable to read partition table [ 143.827741][ T3305] Buffer I/O error on dev loop9, logical block 0, async page read [ 143.837749][ T9483] Buffer I/O error on dev loop9, logical block 0, async page read [ 143.851347][ T9483] Buffer I/O error on dev loop9, logical block 0, async page read [ 143.859167][ T9483] loop9: unable to read partition table [ 143.864879][ T3305] Buffer I/O error on dev loop9, logical block 0, async page read [ 143.873206][ T3305] Buffer I/O error on dev loop9, logical block 0, async page read [ 143.883200][ T3305] Buffer I/O error on dev loop9, logical block 0, async page read [ 143.892702][ T9495] __nla_validate_parse: 2 callbacks suppressed [ 143.892714][ T9495] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1743'. [ 143.907541][ T3305] Buffer I/O error on dev loop9, logical block 0, async page read [ 143.919246][ T9374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.939168][ T9374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.951774][ T9483] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 143.951774][ T9483] ) failed (rc=-5) [ 144.020117][ T8311] tipc: Disabling bearer [ 144.025388][ T8311] tipc: Left network mode [ 144.070038][ T9374] team0: Port device team_slave_0 added [ 144.089032][ T9374] team0: Port device team_slave_1 added [ 144.113629][ T9374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.113655][ T9374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.113680][ T9374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.114191][ T9374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.114203][ T9374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.114228][ T9374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.219603][ T8311] hsr_slave_0: left promiscuous mode [ 144.220138][ T8311] hsr_slave_1: left promiscuous mode [ 144.220568][ T8311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.220581][ T8311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.220859][ T8311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.220868][ T8311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.364354][ T8310] smc: removing ib device sz1 [ 144.374998][ T9374] hsr_slave_0: entered promiscuous mode [ 144.375456][ T9374] hsr_slave_1: entered promiscuous mode [ 144.375789][ T9374] debugfs: 'hsr0' already exists in 'hsr' [ 144.375799][ T9374] Cannot create hsr debugfs directory [ 144.375865][ T9527] tipc: Started in network mode [ 144.375952][ T9527] tipc: Node identity ac14140f, cluster identity 4711 [ 144.376026][ T9527] tipc: New replicast peer: 255.255.255.255 [ 144.376148][ T9527] tipc: Enabled bearer , priority 10 [ 144.399469][ T3393] lo speed is unknown, defaulting to 1000 [ 144.399505][ T3393] sz1: Port: 1 Link DOWN [ 144.419315][ T9535] xt_hashlimit: max too large, truncated to 1048576 [ 144.555503][ T9535] loop7: detected capacity change from 0 to 512 [ 144.577847][ T9535] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 144.577922][ T9535] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.610438][ T9535] usb usb8: check_ctrlrecip: process 9535 (syz.7.1753) requesting ep 01 but needs 81 [ 144.610465][ T9535] usb usb8: usbfs: process 9535 (syz.7.1753) did not claim interface 0 before use [ 144.709784][ T9535] loop7: detected capacity change from 512 to 64 [ 144.745693][ T8727] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /33/file0: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=2048 fake=0 [ 144.755022][ T8727] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Out of memory [ 144.755961][ T8727] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #2: comm syz-executor: mark_inode_dirty error [ 144.890986][ T9374] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 144.911108][ T9549] loop8: detected capacity change from 0 to 512 [ 144.911858][ T9549] FAT-fs (loop8): Invalid FSINFO signature: 0x00000001, 0x61417272 (sector = 1) [ 144.913857][ T9374] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 144.970627][ T9374] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 144.976940][ T9374] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 145.082982][ T8311] IPVS: stop unused estimator thread 0... [ 145.124886][ T9374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.129488][ T9374] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.137509][ T6497] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.137541][ T6497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.138818][ T6497] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.138845][ T6497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.152319][ T9374] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 145.152359][ T9374] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.284652][ T9374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.418891][ T8311] Bluetooth: hci0: Frame reassembly failed (-84) [ 145.489829][ T3777] tipc: Node number set to 2886997007 [ 145.593086][ T9374] veth0_vlan: entered promiscuous mode [ 145.622008][ T9374] veth1_vlan: entered promiscuous mode [ 145.653789][ T9374] veth0_macvtap: entered promiscuous mode [ 145.672488][ T9374] veth1_macvtap: entered promiscuous mode [ 145.684922][ T9374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.695995][ T9374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.746409][ T9614] netlink: 'syz.0.1769': attribute type 10 has an invalid length. [ 145.754468][ T9614] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1769'. [ 145.798608][ T6497] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.821914][ T6497] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.838258][ T6497] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.851414][ T6497] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.049642][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 146.049656][ T29] audit: type=1326 audit(1764512289.496:6011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="+}[K" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64a44f749 code=0x7ffc0000 [ 146.078747][ T29] audit: type=1326 audit(1764512289.496:6012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="+}[K" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7ff64a44f749 code=0x7ffc0000 [ 146.101637][ T29] audit: type=1326 audit(1764512289.496:6013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="+}[K" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64a44f749 code=0x7ffc0000 [ 146.124622][ T29] audit: type=1326 audit(1764512289.496:6014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="+}[K" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff64a44df90 code=0x7ffc0000 [ 146.147589][ T29] audit: type=1326 audit(1764512289.496:6015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="+}[K" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64a44f749 code=0x7ffc0000 [ 146.170446][ T29] audit: type=1326 audit(1764512289.506:6016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="+}[K" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff64a44f749 code=0x7ffc0000 [ 146.193523][ T29] audit: type=1326 audit(1764512289.506:6017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="+}[K" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64a44f749 code=0x7ffc0000 [ 146.216656][ T29] audit: type=1326 audit(1764512289.506:6018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="+}[K" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7ff64a44f749 code=0x7ffc0000 [ 146.239668][ T29] audit: type=1326 audit(1764512289.506:6019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="+}[K" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64a44f749 code=0x7ffc0000 [ 146.262539][ T29] audit: type=1326 audit(1764512289.506:6020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="+}[K" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff64a44f749 code=0x7ffc0000 [ 146.324378][ T9636] loop9: detected capacity change from 0 to 1024 [ 146.334747][ T9636] EXT4-fs: Ignoring removed orlov option [ 146.349650][ T9636] ext4: Unknown parameter 'fsname' [ 146.482869][ T9642] netlink: 'syz.9.1780': attribute type 10 has an invalid length. [ 146.490834][ T9642] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1780'. [ 146.506149][ T9646] tipc: Enabling of bearer rejected, already enabled [ 146.581267][ T9642] team0: Port device geneve1 added [ 146.593053][ T9647] sctp: [Deprecated]: syz.8.1781 (pid 9647) Use of struct sctp_assoc_value in delayed_ack socket option. [ 146.593053][ T9647] Use struct sctp_sack_info instead [ 146.639131][ T9649] FAULT_INJECTION: forcing a failure. [ 146.639131][ T9649] name failslab, interval 1, probability 0, space 0, times 0 [ 146.651869][ T9649] CPU: 0 UID: 0 PID: 9649 Comm: syz.9.1782 Not tainted syzkaller #0 PREEMPT(voluntary) [ 146.651893][ T9649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 146.651903][ T9649] Call Trace: [ 146.651908][ T9649] [ 146.651914][ T9649] __dump_stack+0x1d/0x30 [ 146.651932][ T9649] dump_stack_lvl+0xe8/0x140 [ 146.651949][ T9649] dump_stack+0x15/0x1b [ 146.652030][ T9649] should_fail_ex+0x265/0x280 [ 146.652049][ T9649] should_failslab+0x8c/0xb0 [ 146.652071][ T9649] kmem_cache_alloc_noprof+0x50/0x480 [ 146.652143][ T9649] ? skb_clone+0x151/0x1f0 [ 146.652165][ T9649] skb_clone+0x151/0x1f0 [ 146.652180][ T9649] ip_mc_output+0x10d/0x340 [ 146.652200][ T9649] ? __pfx_dst_output+0x10/0x10 [ 146.652220][ T9649] ip_send_skb+0x151/0x160 [ 146.652292][ T9649] udp_send_skb+0x6e3/0xa40 [ 146.652342][ T9649] udp_sendmsg+0x1050/0x13c0 [ 146.652446][ T9649] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 146.652486][ T9649] ? __pfx_udp_sendmsg+0x10/0x10 [ 146.652511][ T9649] inet_sendmsg+0xac/0xd0 [ 146.652532][ T9649] __sock_sendmsg+0x102/0x180 [ 146.652560][ T9649] ____sys_sendmsg+0x345/0x4e0 [ 146.652580][ T9649] ___sys_sendmsg+0x17b/0x1d0 [ 146.652605][ T9649] __sys_sendmmsg+0x178/0x300 [ 146.652629][ T9649] __x64_sys_sendmmsg+0x57/0x70 [ 146.652646][ T9649] x64_sys_call+0x1c4a/0x3000 [ 146.652740][ T9649] do_syscall_64+0xd2/0x200 [ 146.652756][ T9649] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 146.652778][ T9649] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 146.652837][ T9649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.652858][ T9649] RIP: 0033:0x7f457c37f749 [ 146.652873][ T9649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.652889][ T9649] RSP: 002b:00007f457ade7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 146.652928][ T9649] RAX: ffffffffffffffda RBX: 00007f457c5d5fa0 RCX: 00007f457c37f749 [ 146.652939][ T9649] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000004 [ 146.652950][ T9649] RBP: 00007f457ade7090 R08: 0000000000000000 R09: 0000000000000000 [ 146.652963][ T9649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.652976][ T9649] R13: 00007f457c5d6038 R14: 00007f457c5d5fa0 R15: 00007ffcaaba0588 [ 146.653055][ T9649] [ 147.041094][ T9660] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1786'. [ 147.198466][ T9665] xt_hashlimit: max too large, truncated to 1048576 [ 147.213353][ T9665] loop9: detected capacity change from 0 to 512 [ 147.267819][ T9665] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 147.324026][ T9665] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.400841][ T9665] usb usb8: check_ctrlrecip: process 9665 (syz.9.1788) requesting ep 01 but needs 81 [ 147.410361][ T9665] usb usb8: usbfs: process 9665 (syz.9.1788) did not claim interface 0 before use [ 147.479846][ T9665] loop9: detected capacity change from 512 to 64 [ 147.480738][ T3673] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 147.486661][ T9665] syz.9.1788: attempt to access beyond end of device [ 147.486661][ T9665] loop9: rw=2049, sector=352, nr_sectors = 4 limit=64 [ 147.492405][ T8673] Bluetooth: hci0: command 0x1003 tx timeout [ 147.505782][ T9665] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 19 starting block 88) [ 147.522710][ T9665] Buffer I/O error on device loop9, logical block 88 [ 147.549659][ T9675] loop8: detected capacity change from 0 to 1024 [ 147.574594][ T9374] EXT4-fs error (device loop9): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /6/file0: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=2048 fake=0 [ 147.602857][ T9677] netlink: 'syz.6.1793': attribute type 10 has an invalid length. [ 147.610762][ T9677] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1793'. [ 147.643238][ T9675] EXT4-fs: Ignoring removed orlov option [ 147.677897][ T9675] ext4: Unknown parameter 'fsname' [ 147.702805][ T9374] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6313: Out of memory [ 147.712270][ T9374] EXT4-fs error (device loop9): ext4_dirty_inode:6517: inode #2: comm syz-executor: mark_inode_dirty error [ 147.830211][ T9681] bridge: RTM_NEWNEIGH with invalid ether address [ 147.935880][ T9686] loop8: detected capacity change from 0 to 1024 [ 147.960054][ T9686] EXT4-fs: Ignoring removed orlov option [ 147.965725][ T9686] ext4: Unknown parameter 'fsname' [ 148.114957][ T9692] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 148.214559][ T9696] v: renamed from ip6_vti0 (while UP) [ 148.780621][ T9704] tipc: Enabling of bearer rejected, already enabled [ 148.963291][ T9711] netlink: 'syz.6.1806': attribute type 10 has an invalid length. [ 148.971236][ T9711] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1806'. [ 149.044698][ T9713] FAULT_INJECTION: forcing a failure. [ 149.044698][ T9713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.057770][ T9713] CPU: 1 UID: 0 PID: 9713 Comm: syz.6.1807 Not tainted syzkaller #0 PREEMPT(voluntary) [ 149.057794][ T9713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 149.057837][ T9713] Call Trace: [ 149.057843][ T9713] [ 149.057851][ T9713] __dump_stack+0x1d/0x30 [ 149.057873][ T9713] dump_stack_lvl+0xe8/0x140 [ 149.057962][ T9713] dump_stack+0x15/0x1b [ 149.057980][ T9713] should_fail_ex+0x265/0x280 [ 149.058000][ T9713] should_fail+0xb/0x20 [ 149.058016][ T9713] should_fail_usercopy+0x1a/0x20 [ 149.058036][ T9713] _copy_from_user+0x1c/0xb0 [ 149.058099][ T9713] ___sys_sendmsg+0xc1/0x1d0 [ 149.058133][ T9713] __sys_sendmmsg+0x178/0x300 [ 149.058163][ T9713] __x64_sys_sendmmsg+0x57/0x70 [ 149.058179][ T9713] x64_sys_call+0x1c4a/0x3000 [ 149.058196][ T9713] do_syscall_64+0xd2/0x200 [ 149.058248][ T9713] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 149.058273][ T9713] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 149.058365][ T9713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.058384][ T9713] RIP: 0033:0x7f8175a2f749 [ 149.058399][ T9713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.058434][ T9713] RSP: 002b:00007f817448f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 149.058454][ T9713] RAX: ffffffffffffffda RBX: 00007f8175c85fa0 RCX: 00007f8175a2f749 [ 149.058467][ T9713] RDX: 0000000000000001 RSI: 0000200000001880 RDI: 0000000000000005 [ 149.058480][ T9713] RBP: 00007f817448f090 R08: 0000000000000000 R09: 0000000000000000 [ 149.058493][ T9713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.058503][ T9713] R13: 00007f8175c86038 R14: 00007f8175c85fa0 R15: 00007ffd51fae4f8 [ 149.058519][ T9713] [ 149.439011][ T9720] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 149.568271][ T9729] xt_hashlimit: max too large, truncated to 1048576 [ 149.598599][ T9729] loop6: detected capacity change from 0 to 512 [ 149.640903][ T9729] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 149.659882][ T9729] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.710192][ T9729] usb usb8: check_ctrlrecip: process 9729 (syz.6.1813) requesting ep 01 but needs 81 [ 149.719779][ T9729] usb usb8: usbfs: process 9729 (syz.6.1813) did not claim interface 0 before use [ 149.769817][ T9729] loop6: detected capacity change from 512 to 64 [ 149.777648][ T9729] EXT4-fs error (device loop6): ext4_write_dquot:6925: comm syz.6.1813: Failed to commit dquot type 1 [ 149.788953][ T9729] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6313: Out of memory [ 149.798227][ T9729] EXT4-fs error (device loop6): ext4_ext_truncate:4475: inode #19: comm syz.6.1813: mark_inode_dirty error [ 149.810061][ T9729] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6313: Out of memory [ 149.819503][ T9729] EXT4-fs error (device loop6): ext4_truncate:4637: inode #19: comm syz.6.1813: mark_inode_dirty error [ 149.856075][ T8704] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /56/file0: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=2048 fake=0 [ 149.900579][ T8704] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6313: Out of memory [ 149.920067][ T8704] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #2: comm syz-executor: mark_inode_dirty error [ 149.975785][ T9413] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 150.196863][ T8313] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.307779][ T8313] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.402925][ T8313] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.474659][ T8313] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.601779][ T8313] bridge_slave_1: left allmulticast mode [ 150.607451][ T8313] bridge_slave_1: left promiscuous mode [ 150.613127][ T8313] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.658832][ T8313] bridge_slave_0: left allmulticast mode [ 150.664534][ T8313] bridge_slave_0: left promiscuous mode [ 150.670459][ T8313] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.763315][ T8313] team0: Port device geneve1 removed [ 150.834248][ T8313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.855222][ T8313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.895112][ T8313] bond0 (unregistering): Released all slaves [ 150.981869][ T8313] tipc: Disabling bearer [ 150.987127][ T8313] tipc: Left network mode [ 151.086090][ T8313] hsr_slave_0: left promiscuous mode [ 151.103501][ T8313] hsr_slave_1: left promiscuous mode [ 151.129992][ T8313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.137397][ T8313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.195041][ T8313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.202471][ T8313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.249972][ T8313] veth1_macvtap: left promiscuous mode [ 151.255458][ T8313] veth0_macvtap: left promiscuous mode [ 151.279781][ T8313] veth1_vlan: left promiscuous mode [ 151.285261][ T8313] veth0_vlan: left promiscuous mode [ 151.357016][ T9790] loop8: detected capacity change from 0 to 1024 [ 151.374932][ T9790] EXT4-fs: Ignoring removed orlov option [ 151.392697][ T9790] ext4: Unknown parameter 'fsname' [ 151.426186][ T29] kauditd_printk_skb: 466 callbacks suppressed [ 151.426199][ T29] audit: type=1326 audit(1764512294.886:6486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9789 comm="+}[K" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31064ff749 code=0x7ffc0000 [ 151.506533][ T29] audit: type=1326 audit(1764512294.926:6487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9789 comm="+}[K" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f31064ff749 code=0x7ffc0000 [ 151.529504][ T29] audit: type=1326 audit(1764512294.926:6488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9789 comm="+}[K" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31064ff749 code=0x7ffc0000 [ 151.552537][ T29] audit: type=1326 audit(1764512294.926:6489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9789 comm="+}[K" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f31064fdf90 code=0x7ffc0000 [ 151.575471][ T29] audit: type=1326 audit(1764512294.926:6490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9789 comm="+}[K" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31064ff749 code=0x7ffc0000 [ 151.598388][ T29] audit: type=1326 audit(1764512294.926:6491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9789 comm="+}[K" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31064ff749 code=0x7ffc0000 [ 151.621280][ T29] audit: type=1326 audit(1764512294.926:6492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9789 comm="+}[K" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f31064ff749 code=0x7ffc0000 [ 151.644136][ T29] audit: type=1326 audit(1764512294.926:6493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9789 comm="+}[K" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31064ff749 code=0x7ffc0000 [ 151.667150][ T29] audit: type=1326 audit(1764512294.926:6494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9789 comm="+}[K" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31064ff749 code=0x7ffc0000 [ 151.690010][ T29] audit: type=1326 audit(1764512294.926:6495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9789 comm="+}[K" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f31064ff749 code=0x7ffc0000 [ 151.715825][ T8313] team0 (unregistering): Port device team_slave_1 removed [ 151.753092][ T8313] team0 (unregistering): Port device team_slave_0 removed [ 151.831408][ T9798] loop8: detected capacity change from 0 to 512 [ 151.864844][ T9746] chnl_net:caif_netlink_parms(): no params data found [ 151.872378][ T9798] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 151.912793][ T9798] EXT4-fs (loop8): invalid journal inode [ 151.918552][ T9798] EXT4-fs (loop8): can't get journal size [ 151.932516][ T9798] EXT4-fs (loop8): 1 truncate cleaned up [ 151.979240][ T9798] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.016461][ T9746] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.023661][ T9746] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.159920][ T9746] bridge_slave_0: entered allmulticast mode [ 152.181141][ T9746] bridge_slave_0: entered promiscuous mode [ 152.207975][ T9746] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.215087][ T9746] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.239996][ T9746] bridge_slave_1: entered allmulticast mode [ 152.256827][ T9746] bridge_slave_1: entered promiscuous mode [ 152.341570][ T9746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.382132][ T9746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.460397][ T9746] team0: Port device team_slave_0 added [ 152.485085][ T9746] team0: Port device team_slave_1 added [ 152.515246][ T9746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.522246][ T9746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.548197][ T9746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.599345][ T9746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.606452][ T9746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.632423][ T9746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.762496][ T9746] hsr_slave_0: entered promiscuous mode [ 152.778727][ T9746] hsr_slave_1: entered promiscuous mode [ 152.784817][ T9746] debugfs: 'hsr0' already exists in 'hsr' [ 152.790551][ T9746] Cannot create hsr debugfs directory [ 153.211028][ T9746] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 153.251204][ T9746] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 153.280400][ T9746] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 153.311534][ T9746] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 153.454288][ T9746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.474470][ T8731] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.485754][ T9746] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.551129][ T8313] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.558228][ T8313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.580825][ T8313] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.587901][ T8313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.735610][ T9900] gre1: entered promiscuous mode [ 153.740663][ T9900] gre1: entered allmulticast mode [ 153.765707][ T9746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.783509][ T9900] loop8: detected capacity change from 0 to 764 [ 153.839144][ T9900] Symlink component flag not implemented [ 153.844836][ T9900] Symlink component flag not implemented [ 153.868576][ T9900] Symlink component flag not implemented (129) [ 153.874811][ T9900] Symlink component flag not implemented (6) [ 153.935411][ T9746] veth0_vlan: entered promiscuous mode [ 153.970699][ T9746] veth1_vlan: entered promiscuous mode [ 154.070507][ T9746] veth0_macvtap: entered promiscuous mode [ 154.095255][ T9746] veth1_macvtap: entered promiscuous mode [ 154.130777][ T9746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.162927][ T9746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.194613][ T6492] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.207051][ T6492] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.240982][ T6492] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.280671][ T6492] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.345251][ T9947] loop2: detected capacity change from 0 to 512 [ 154.419061][ T9947] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 154.459434][ T9947] program syz.2.1818 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.670383][ T9974] netlink: 'syz.0.1840': attribute type 10 has an invalid length. [ 154.690507][ T9974] bond0: (slave dummy0): Releasing backup interface [ 154.709707][ T9974] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 154.729904][ T9974] team0: Failed to send options change via netlink (err -105) [ 154.737405][ T9974] team0: Port device dummy0 added [ 154.769030][ T9984] netlink: 'syz.0.1840': attribute type 10 has an invalid length. [ 154.790274][ T9984] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 154.791892][ T9989] loop2: detected capacity change from 0 to 128 [ 154.807175][ T9984] team0: Failed to send options change via netlink (err -105) [ 154.815262][ T9989] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 154.880122][ T9984] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 154.899233][ T9984] team0: Port device dummy0 removed [ 155.055584][T10012] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1847'. [ 155.112932][T10020] loop2: detected capacity change from 0 to 256 [ 155.163662][T10020] FAT-fs (loop2): Directory bread(block 64) failed [ 155.174481][T10020] FAT-fs (loop2): Directory bread(block 65) failed [ 155.215945][T10020] FAT-fs (loop2): Directory bread(block 66) failed [ 155.239771][T10020] FAT-fs (loop2): Directory bread(block 67) failed [ 155.246380][T10020] FAT-fs (loop2): Directory bread(block 68) failed [ 155.255786][T10033] netlink: 'syz.0.1851': attribute type 10 has an invalid length. [ 155.263694][T10033] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1851'. [ 155.319770][T10020] FAT-fs (loop2): Directory bread(block 69) failed [ 155.348802][T10020] FAT-fs (loop2): Directory bread(block 70) failed [ 155.376381][T10020] FAT-fs (loop2): Directory bread(block 71) failed [ 155.400108][T10020] FAT-fs (loop2): Directory bread(block 72) failed [ 155.420048][T10020] FAT-fs (loop2): Directory bread(block 73) failed [ 155.969195][T10093] loop2: detected capacity change from 0 to 512 [ 156.016182][T10093] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.1860: corrupted in-inode xattr: invalid ea_ino [ 156.116467][T10093] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1860: couldn't read orphan inode 15 (err -117) [ 156.193326][T10093] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.209849][T10106] 9pnet: Could not find request transport: [ 156.248810][T10093] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1860'. [ 156.283118][T10103] IPv6: NLM_F_CREATE should be specified when creating new route [ 156.314458][ T9746] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.438744][T10120] loop2: detected capacity change from 0 to 8192 [ 156.453583][T10120] msdos: Unknown parameter 'n' [ 156.530109][T10120] loop2: detected capacity change from 0 to 512 [ 156.560173][T10120] EXT4-fs: test_dummy_encryption option not supported [ 156.571186][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 156.571199][ T29] audit: type=1326 audit(1764512300.036:6535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10119 comm="syz.2.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644e91f749 code=0x7ffc0000 [ 156.641805][ T29] audit: type=1326 audit(1764512300.036:6536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10119 comm="syz.2.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f644e91f749 code=0x7ffc0000 [ 156.665320][ T29] audit: type=1326 audit(1764512300.036:6537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10119 comm="syz.2.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644e91f749 code=0x7ffc0000 [ 156.688867][ T29] audit: type=1326 audit(1764512300.036:6538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10119 comm="syz.2.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f644e91df90 code=0x7ffc0000 [ 156.712372][ T29] audit: type=1326 audit(1764512300.036:6539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10119 comm="syz.2.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644e91f749 code=0x7ffc0000 [ 156.735840][ T29] audit: type=1326 audit(1764512300.036:6540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10119 comm="syz.2.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f644e91f749 code=0x7ffc0000 [ 156.759401][ T29] audit: type=1326 audit(1764512300.036:6541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10119 comm="syz.2.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644e91f749 code=0x7ffc0000 [ 156.782874][ T29] audit: type=1326 audit(1764512300.036:6542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10119 comm="syz.2.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f644e91f749 code=0x7ffc0000 [ 156.806315][ T29] audit: type=1326 audit(1764512300.036:6543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10119 comm="syz.2.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644e91f749 code=0x7ffc0000 [ 156.829777][ T29] audit: type=1326 audit(1764512300.036:6544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10119 comm="syz.2.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f644e91f749 code=0x7ffc0000 [ 156.887064][T10150] tipc: Started in network mode [ 156.892041][T10150] tipc: Node identity ac14140f, cluster identity 4711 [ 156.919250][T10150] tipc: New replicast peer: 255.255.255.255 [ 156.925376][T10150] tipc: Enabled bearer , priority 10 [ 157.302049][T10170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1870'. [ 157.350067][T10160] loop2: detected capacity change from 0 to 32768 [ 157.459991][ T3305] loop2: p1 p3 < > [ 157.471092][T10160] loop2: p1 p3 < > [ 157.566517][T10178] xt_hashlimit: max too large, truncated to 1048576 [ 157.615142][T10178] loop2: detected capacity change from 0 to 512 [ 157.669938][T10178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 157.712295][T10178] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.818756][ T9047] udevd[9047]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 157.829619][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 157.880391][T10178] usb usb8: check_ctrlrecip: process 10178 (syz.2.1875) requesting ep 01 but needs 81 [ 157.882272][ T9047] udevd[9047]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 157.890085][T10178] usb usb8: usbfs: process 10178 (syz.2.1875) did not claim interface 0 before use [ 157.900497][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 157.997804][T10199] loop8: detected capacity change from 0 to 1024 [ 158.009811][T10178] loop2: detected capacity change from 512 to 64 [ 158.016540][T10200] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #19: comm syz.2.1875: corrupted xattr block 20: invalid header [ 158.039834][ T3407] tipc: Node number set to 2886997007 [ 158.045581][T10199] EXT4-fs: Ignoring removed orlov option [ 158.089947][T10199] ext4: Unknown parameter 'fsname' [ 158.097806][T10200] EXT4-fs error (device loop2): ext4_write_dquot:6925: comm syz.2.1875: Failed to commit dquot type 1 [ 158.159926][T10200] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Out of memory [ 158.270487][T10200] EXT4-fs error (device loop2): ext4_ext_truncate:4475: inode #19: comm syz.2.1875: mark_inode_dirty error [ 158.307498][T10216] xt_hashlimit: max too large, truncated to 1048576 [ 158.329766][T10200] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Out of memory [ 158.355024][T10216] loop8: detected capacity change from 0 to 512 [ 158.370669][T10200] EXT4-fs error (device loop2): ext4_truncate:4637: inode #19: comm syz.2.1875: mark_inode_dirty error [ 158.403230][T10216] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 158.450159][T10216] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.483939][ T9746] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /13/file0: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=2048 fake=0 [ 158.569970][ T9746] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Out of memory [ 158.579791][T10216] loop8: detected capacity change from 512 to 64 [ 158.586658][T10216] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: Out of memory [ 158.591471][ T9746] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz-executor: mark_inode_dirty error [ 158.598932][T10216] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #19: comm syz.8.1878: mark_inode_dirty error [ 158.626421][T10216] syz.8.1878: attempt to access beyond end of device [ 158.626421][T10216] loop8: rw=2049, sector=352, nr_sectors = 4 limit=64 [ 158.639763][T10216] EXT4-fs warning (device loop8): ext4_end_bio:372: I/O error 10 writing to inode 19 starting block 88) [ 158.650903][T10216] Buffer I/O error on device loop8, logical block 88 [ 158.670670][ T6515] kworker/u8:35: attempt to access beyond end of device [ 158.670670][ T6515] loop2: rw=0, sector=84, nr_sectors = 4 limit=64 [ 158.700112][ T8731] EXT4-fs error (device loop8): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /60/file0: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=2048 fake=0 [ 158.709762][ T6515] EXT4-fs (loop2): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 2 with error 5 [ 158.732341][ T6515] EXT4-fs (loop2): This should not happen!! Data will be lost [ 158.732341][ T6515] [ 158.769853][ T8731] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: Out of memory [ 158.799745][ T8731] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #2: comm syz-executor: mark_inode_dirty error [ 158.801932][ T9746] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 159.063163][ T8313] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.143242][ T8313] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.246687][ T8313] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.342241][ T8313] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.490565][ T8313] bridge_slave_1: left allmulticast mode [ 159.496245][ T8313] bridge_slave_1: left promiscuous mode [ 159.501934][ T8313] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.530417][ T8313] bridge_slave_0: left allmulticast mode [ 159.536139][ T8313] bridge_slave_0: left promiscuous mode [ 159.541771][ T8313] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.549786][ C1] ================================================================== [ 159.557857][ C1] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 159.565058][ C1] [ 159.567374][ C1] read-write to 0xffff888101217cb8 of 8 bytes by interrupt on cpu 0: [ 159.575425][ C1] wq_worker_tick+0x60/0x230 [ 159.580009][ C1] sched_tick+0x11a/0x270 [ 159.584334][ C1] update_process_times+0x15f/0x190 [ 159.589526][ C1] tick_nohz_handler+0x249/0x2d0 [ 159.594462][ C1] __hrtimer_run_queues+0x20f/0x5a0 [ 159.599658][ C1] hrtimer_interrupt+0x21a/0x460 [ 159.604587][ C1] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 159.610485][ C1] sysvec_apic_timer_interrupt+0x6f/0x80 [ 159.616115][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 159.622089][ C1] __tsan_unaligned_write8+0x2c/0x190 [ 159.627457][ C1] __ext4_journal_stop+0x48/0x120 [ 159.632475][ C1] ext4_do_writepages+0xa70/0x2750 [ 159.637579][ C1] ext4_writepages+0x176/0x300 [ 159.642345][ C1] do_writepages+0x1c6/0x310 [ 159.646922][ C1] __writeback_single_inode+0x80/0x7c0 [ 159.652374][ C1] writeback_sb_inodes+0x48f/0xa30 [ 159.657478][ C1] wb_writeback+0x252/0x5c0 [ 159.661976][ C1] wb_workfn+0x194/0x910 [ 159.666222][ C1] process_scheduled_works+0x4ce/0x9d0 [ 159.671678][ C1] worker_thread+0x582/0x770 [ 159.676257][ C1] kthread+0x489/0x510 [ 159.680324][ C1] ret_from_fork+0x122/0x1b0 [ 159.684899][ C1] ret_from_fork_asm+0x1a/0x30 [ 159.689645][ C1] [ 159.691948][ C1] read-write to 0xffff888101217cb8 of 8 bytes by interrupt on cpu 1: [ 159.699990][ C1] wq_worker_tick+0x60/0x230 [ 159.704567][ C1] sched_tick+0x11a/0x270 [ 159.708879][ C1] update_process_times+0x15f/0x190 [ 159.714058][ C1] tick_nohz_handler+0x249/0x2d0 [ 159.718981][ C1] __hrtimer_run_queues+0x20f/0x5a0 [ 159.724167][ C1] hrtimer_interrupt+0x21a/0x460 [ 159.729093][ C1] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 159.734974][ C1] sysvec_apic_timer_interrupt+0x6f/0x80 [ 159.740597][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 159.746560][ C1] __tsan_read8+0xe6/0x190 [ 159.750960][ C1] mpage_prepare_extent_to_map+0x656/0xc00 [ 159.756750][ C1] ext4_do_writepages+0xa05/0x2750 [ 159.761839][ C1] ext4_writepages+0x176/0x300 [ 159.766584][ C1] do_writepages+0x1c6/0x310 [ 159.771158][ C1] __writeback_single_inode+0x80/0x7c0 [ 159.776603][ C1] writeback_sb_inodes+0x48f/0xa30 [ 159.781694][ C1] wb_writeback+0x252/0x5c0 [ 159.786176][ C1] wb_workfn+0x194/0x910 [ 159.790410][ C1] process_scheduled_works+0x4ce/0x9d0 [ 159.795859][ C1] worker_thread+0x582/0x770 [ 159.800429][ C1] kthread+0x489/0x510 [ 159.804486][ C1] ret_from_fork+0x122/0x1b0 [ 159.809056][ C1] ret_from_fork_asm+0x1a/0x30 [ 159.813803][ C1] [ 159.816105][ C1] value changed: 0x00000000022af650 -> 0x00000000022b1d60 [ 159.823189][ C1] [ 159.825492][ C1] Reported by Kernel Concurrency Sanitizer on: [ 159.831618][ C1] CPU: 1 UID: 0 PID: 6515 Comm: kworker/u8:35 Not tainted syzkaller #0 PREEMPT(voluntary) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 159.841583][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 159.851622][ C1] Workqueue: writeback wb_workfn (flush-7:8) [ 159.857596][ C1] ================================================================== [ 160.092551][ T8313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.161188][ T8313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.180886][ T8313] bond0 (unregistering): Released all slaves [ 160.271424][ T8313] tipc: Disabling bearer [ 160.276652][ T8313] tipc: Left network mode [ 160.381438][ T8313] hsr_slave_0: left promiscuous mode [ 160.389753][ T8313] hsr_slave_1: left promiscuous mode [ 160.412194][ T8313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.419615][ T8313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.461530][ T8313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.468986][ T8313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.523310][ T8313] veth1_macvtap: left promiscuous mode [ 160.528860][ T8313] veth0_macvtap: left promiscuous mode [ 160.549842][ T8313] veth1_vlan: left promiscuous mode [ 160.555119][ T8313] veth0_vlan: left promiscuous mode [ 160.678089][ T8313] team0 (unregistering): Port device team_slave_1 removed [ 160.703055][ T8313] team0 (unregistering): Port device team_slave_0 removed